OID | 1.3.6.1.4.1.4491.2.1.11.1.9.1 |
Module | DOCS-SEC-MIB (CISCO) |
Nom | docsSecCmtsCertificateCertRevocationMethod |
Acces | readwrite |
Status | current |
Description | This attribute identifies which certificate revocation
method is to be used by the CMTS to verify the cable
modem certificate validity. The certificate revocation
methods include Certification Revocation
List (CRL) and Online Certificate Status Protocol
(OCSP).
The following options are available:
The option 'none' indicates that the CMTS does not attempt
to determine the revocation status of a certificate.
The option 'crl' indicates the CMTS uses a Certificate
Revocation List (CRL) as defined by the Url attribute
of the CmtsCertRevocationList object. When the
value of this attribute is changed to 'crl', it triggers
the CMTS to retrieve the CRL from the URL specified
by the Url attribute. If the value of this attribute
is 'crl' when the CMTS starts up, it triggers the CMTS
to retrieve the CRL from the URL specified by the Url attribute.
The option 'ocsp' indicates the CMTS uses the Online
Certificate Status Protocol (OCSP) as defined by the
Url attribute of the CmtsOnlineCertStatusProtocol
object.
The option 'crlAndOcsp' indicates the CMTS uses both
the CRL as defined by the Url attribute in the
CmtsCertRevocationList object and OCSP as defined by the Url
attribute in the CmtsOnlineCertStatusProtocol
object.
The CMTS persists the values of the CertRevocationMethod
attribute across reinitializations. |
Syntaxe | Enumeration (1-none, 2-crl, 3-ocsp, 4-crlAndOcsp) |