1. Administrative Security Guide
  2. Configuring IKEv2 Interfaces
  3. Certificate Revocation Lists
  4. CRL-Based Certificate Verification
  5. Configuring Manual CRL Updates

Configuring Manual CRL Updates

The ACLI provides the ability to perform an immediate manual refresh of one or more CRLs.

Use the following command to refresh a single CRL.

ORACLE# load-crl local-file <fileName>

where <fileName> is a remote filepath specified by the crl-list attribute.

Use the following command to refresh all CRLs.

ORACLE# load-crl local-file all

Use the following command to refresh all CRLs from a specific CRL source.

ORACLE# load-crl cert-status-profile <certStatusProfileName>

where <certStatusProfileName> references the certificate-status-profile configuration element that contains the CRL source IP address or FQDN.

Use the following command to refresh all CRLs.

ORACLE# load-crl cert-status-profile all