Synopsis
cmentcrl FileName [-ed Environment-directory ] [-nv] |
Description
The cmentcrl command registers CRLs in the certificate/key management environment. Options that can be specified are shown below.
Options
FileName
Specify the full path of the filename (FileName) where the CRL data to be registered is stored.
DER and BASE64 format CRL files can be specified.
-ed Environment-directory
Specify the full path of the operation management directory (Environment-directory). If this option is omitted, the information set in the "CMIPATH" environment variable takes effect.
-nv
Specify this option if CRL verification is not performed during registration. If this option is specified, invalid CRLs can be registered, so do not specify this option.
Command Location
Windows | %CommonProgramFiles%\Fujitsu Shared\F3FSSMEE |
Solaris | /opt/FJSVsmee/bin |
Linux | /opt/FJSVsmee/bin |
Linux x64 | /opt/FJSVsmee64/bin |
Cautions
If there is an old CRL issued by the same Certificate Authority, the old CRL is deleted when the CRL is registered.
The certificate of the CA that issued the CRL must already be registered.
If a BASE64 format CRL is specified in the CRL file, and if the header and footer shown below are attached, that line is skipped. Note that, if the format is other than as shown below, the command ends with an error. Also, if the specified CRL file contains multiple CRLs, only the first data is targeted.
Header: -----Line starting with BEGIN
Footer: -----Line starting with END
An example of CRL data in BASE64 format is shown below.
-----BEGIN X509 CRL----- |
