Downloading a local CRL file using the CLI

Use the CLI commands in this section to download a local Certificate Revocation List (CRL) file from a specified remote location so that the appliance can validate certificate revocation. Only one CRL file can be present on the system. When you download a new CRL file, the existing CRL file will be automatically deleted.

To download a local CRL file:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Verify the name of the configured CRL file.

hostname (config) # show aaa authentication certificate

Certificate based authentication settings:

...

  CRL Filename                   : john-doe.crl.pem

Download a local CRL file from a specified URL to the appliance.
```
hostname (config) # aaa authentication certificate crl fetch url <URL>
```
where <URL> is the direct path to the certificate file. The <url> is specified with remote server Administrator credentials (<username> and <password>), the remote server (<hostname>), the path and filename in which to save the certificate bundle (<path/filename> )in the following format:
```
scp://<username>[:<password>]@<hostname>/<path/filename>
```
Note
If you do not specify the remote host administrator password in the aaa authentication certificate crl fetch url command (where the password would be visible as clear text), the CLI prompts for the password and obfuscates the keyboard input as you type it.
(Optional) Specify a filename to save the CRL file that you downloaded.
```
hostname (config) # aaa authentication certificate crl fetch url <URL> filename <name_of_file>
```
Note
If you do not specify a filename, the CRL file will be saved to the appliance locally and the remote filename will be used.

Verify the content of the CRL file.

hostname (config) # show aaa authentication certificate crl

 Filename       : john-doe.crl.pem

 File Timestamp : 2016/10/11 23:56:04

 File MD5Sum    : 285d9b706f5636f575c3d2d2e2fc9fb3

 File Content   :

-----BEGIN X509 CRL-----

MIIB5zCB0AIBATANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzELMAkGA1UE

CAwCQ0ExETAPBgNVBAcMCE1pbHBpdGFzMRAwDgYDVQQKDAdGaXJlRXllMQ0wCwYD

VQQLDARDQW91MRIwEAYDVQQDDAl2cHMxX2NhXzMXDTE2MTAxMDE4MDIyNFoXDTE2

MTEwOTE4MDIyNFowKjATAgIgARcNMTYxMDA3MjAzNzQ2WjATAgIgAhcNMTYxMDEw

MTc1NTI1WqAOMAwwCgYDVR0UBAMCAQIwDQYJKoZIhvcNAQELBQADggEBAJcE2qxg

QqA9Y2791InwFcJ2xZi3raEXRldZcB6nh421yvRYWsRAsSr6d6JyPJC0mYfWBkOz

avsBwoFXygInwF1fDfR4oLM+kQchFE5n9ukwhuK6aGd2sAM+BAIiPyVVFw5UdhQ/

7cewJ/5sOTW3cO0uA70DEJmKK25mHfR89jSuFjQArj6QvgkWRMYugpqnounX3ujA

RBEPhCiTaHpyCxJj6LrBMCvAaSQNg1udAF3I68MHjh5SrVD7fjDruI43pTOeVzFn

0wqDc/YyN+meVlhznsB0IcVqon10zPkIBCxS3k9ditHUaL7Nb5LYxkl65reo6JjG

LFadKDokYyzZBBY=

-----END X509 CRL-----

Save your changes.
```
hostname (config) # write memory
```