Cisco Systems 6500 Switch User Manual


 
2-92
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
Chapter2 Commands for the Catalyst 6500 Series SSL Services Module
ssl-proxy pki
Usage Guidelines The ssl-proxy pki history command enables logging of certificate history records per-proxy service into
memory and generates a syslog message per record. Each record tracks the addition or deletion of a key
pair or certificate into the proxy services key and the certificate table.
When the index of the table changes, this command logs the following information:
Key pair name
Trustpoint label
Service name
Subject name
Serial number of the certificate
Up to 512 records can be stored in the memory at one time.
Examples This example shows how to specify the timeout in seconds for each request:
ssl-proxy (config)# ssl-proxy pki authenticate timeout 200
ssl-proxy (config)#
This example shows how to specify the cache size:
ssl-proxy (config)# ssl-proxy pki cache size 50
ssl-proxy (config)#
This example shows how to specify the aging timeout value of entries:
ssl-proxy (config)# ssl-proxy pki cache timeout 20
ssl-proxy (config)#
This example shows how to specify the check-expiring interval:
ssl-proxy (config)# ssl-proxy pki certificate check-expiring interval 100
ssl-proxy (config)#
This example shows how to enable PKI event-history:
ssl-proxy (config)# ssl-proxy pki history
ssl-proxy (config)#
Related Commands show ssl-proxy stats