Fortinet black logo

CLI Reference

config vpn certificate ocsp-server

config vpn certificate ocsp-server

OCSP server configuration.

config vpn certificate ocsp-server

Description: OCSP server configuration.

edit <name>

set url {string}

set cert {string}

set secondary-url {string}

set secondary-cert {string}

set unavail-action [revoke|ignore]

set source-ip {ipv4-address}

next

end

config vpn certificate ocsp-server

Parameter name

Description

Type

Size

url

OCSP server URL.

string

Maximum length: 127

cert

OCSP server certificate.

string

Maximum length: 127

secondary-url

Secondary OCSP server URL.

string

Maximum length: 127

secondary-cert

Secondary OCSP server certificate.

string

Maximum length: 127

unavail-action

Action when server is unavailable (revoke the certificate or ignore the result of the check).

option

-

Option

Description

revoke

Revoke certificate if server is unavailable.

ignore

Ignore OCSP check if server is unavailable.

source-ip

Source IP address for communications to the OCSP server.

ipv4-address

Not Specified

config vpn certificate ocsp-server

OCSP server configuration.

config vpn certificate ocsp-server

Description: OCSP server configuration.

edit <name>

set url {string}

set cert {string}

set secondary-url {string}

set secondary-cert {string}

set unavail-action [revoke|ignore]

set source-ip {ipv4-address}

next

end

config vpn certificate ocsp-server

Parameter name

Description

Type

Size

url

OCSP server URL.

string

Maximum length: 127

cert

OCSP server certificate.

string

Maximum length: 127

secondary-url

Secondary OCSP server URL.

string

Maximum length: 127

secondary-cert

Secondary OCSP server certificate.

string

Maximum length: 127

unavail-action

Action when server is unavailable (revoke the certificate or ignore the result of the check).

option

-

Option

Description

revoke

Revoke certificate if server is unavailable.

ignore

Ignore OCSP check if server is unavailable.

source-ip

Source IP address for communications to the OCSP server.

ipv4-address

Not Specified