Revocation Check for Certificate Signing Request (CSR)-Generated Switch Certificate

ExtremeXOS 31.2 introduces the ability to import CSR-signed certificates with the option to verify the revocation status of the switch certificate generated through CSR. When a certificate is imported using this "csr-cert" option, mandatory trust chain verification, and optional revocation check is performed.

Supported Platforms

ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, and 5520 series switches.

Changed CLI Commands

Changes are underlined.

download ssl ipaddress certificate {ssl-cert | trusted-ca | ocsp-signature-ca | {csr-cert {ocsp [on | off]}} file_name

configure ssl certificatepregenerated{ {csr-cert}pregenerated {ocsp {on | off}}}