Fortinet Document Library

Version:


Table of Contents

CLI Reference

6.2.1
Copy Link

OCSP server configuration.

  config vpn certificate ocsp-server
      Description: OCSP server configuration.
      edit <name>
          set url {string}
          set cert {string}
          set secondary-url {string}
          set secondary-cert {string}
          set unavail-action [revoke|ignore]
          set source-ip {ipv4-address}
      next
  end

config vpn certificate ocsp-server

Parameter Name Description Type Size
url OCSP server URL. string Maximum length: 127
cert OCSP server certificate. string Maximum length: 127
secondary-url Secondary OCSP server URL. string Maximum length: 127
secondary-cert Secondary OCSP server certificate. string Maximum length: 127
unavail-action Action when server is unavailable (revoke the certificate or ignore the result of the check).
revoke: Revoke certificate if server is unavailable.
ignore: Ignore OCSP check if server is unavailable.
option -
source-ip Source IP address for communications to the OCSP server. ipv4-address Not Specified

OCSP server configuration.

  config vpn certificate ocsp-server
      Description: OCSP server configuration.
      edit <name>
          set url {string}
          set cert {string}
          set secondary-url {string}
          set secondary-cert {string}
          set unavail-action [revoke|ignore]
          set source-ip {ipv4-address}
      next
  end

config vpn certificate ocsp-server

Parameter Name Description Type Size
url OCSP server URL. string Maximum length: 127
cert OCSP server certificate. string Maximum length: 127
secondary-url Secondary OCSP server URL. string Maximum length: 127
secondary-cert Secondary OCSP server certificate. string Maximum length: 127
unavail-action Action when server is unavailable (revoke the certificate or ignore the result of the check).
revoke: Revoke certificate if server is unavailable.
ignore: Ignore OCSP check if server is unavailable.
option -
source-ip Source IP address for communications to the OCSP server. ipv4-address Not Specified