Adding or removing the OCSP URL using the CLI

Use the CLI commands in this section to add or remove the default OCSP URL so that the appliance can validate certificate revocation.

To add the default OCSP URL:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the default OCSP URL so that certificate revocation can be validated.
```
hostname (config) # aaa authentication certificate ocsp default URL <URL>
```
where <URL> is the default URL that is configured on the appliance. This URL is based on the configuration of the OCSP override responder.

Verify the configuration of the OCSP URL.

hostname (config) # show aaa authentication certificate

Certificate based authentication settings:

  Web Policy                     : required

  Certificate field for username : x509-cert-subject-cn

  CA certificate bundle          : client-cert-auth

  OCSP enabled                   : no

  Default OCSP URL              : http://10.3.13.219:80

...

To remove the default OCSP URL:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Remove the default OCSP URL.

hostname (config) # no aaa authentication certificate ocsp default URL

Verify the configuration of the OCSP URL.

hostname (config) # show aaa authentication certificate

Certificate based authentication settings:

  Web Policy                     : required

  Certificate field for username : x509-cert-subject-cn

  CA certificate bundle          : client-cert-auth

  OCSP enabled                   : no

  Default OCSP URL              : Not Configured

...