usage
Use usage to specify the extensions for certificates.
Use undo usage to remove certificate extensions.
Syntax
usage { ike | ssl-client | ssl-server } *
undo usage [ ike | ssl-client | ssl-server ] *
Default
No extensions for certificates are specified. A certificate can be used for IKE, SSL clients, and SSL servers.
Views
PKI domain view
Predefined user roles
network-admin
mdc-admin
Parameters
ike: Specifies the IKE certificate extension so IKE peers can use the certificates.
ssl-client: Specifies the SSL client certificate extension so the SSL client can use the certificates.
ssl-server: Specifies the SSL server certificate extension so the SSL server can use the certificates.
Usage guidelines
If you do not specify any keywords for the undo usage command, this command removes all certificate extensions.
The extension options contained in a certificate depends on the CA policy, and might be different from those specified in the PKI domain.
Examples
# Specify the IKE certificate extension.
<Sysname> system-view [Sysname] pki domain aaa [Sysname-pki-domain-aaa] usage ike