Updated on 2024-01-25 GMT+08:00

ALM-4287766534 The CRL Is About to Expire

Description

PKI/4/PKICRLNEARLYEXPIRED: OID [OID] the crl is nearly expired. (CrlIssuer=[crlissuer], CrlStartTime=[crlstarttime], CrlFinishTime=[crlfinishtime])

The CRL is about to expire.

Attribute

Alarm ID

OID

Alarm Severity

Alarm Type

4287766534

1.3.6.1.4.1.2011.6.122.34.0.2.17

Warning

Communication alarm

Parameters

Name

Meaning

OID

Indicates the MIB object ID of the alarm.

crlissuer

Indicates the issuer of the CRL.

crlstarttime

Indicates the start time of the CRL.

crlfinishtime

Indicates the end time of the CRL.

Impact on the System

The service becomes invalid.

Possible Causes

The CRL is to expire. The CRL expiration time is less than 2 hours ahead of the current system time.

Procedure

  1. Run the display clock command to check whether the device time is correct.

    If not, run the clock datetime command in the user view to change the device time.

  2. Obtain a new CRL. For details, see "Configuring Local Certificate Check" in Huawei AR1000VV300R019 Configuration Guide - PKI Configuration.

Clearing

After the fault is rectified, the system clears this alarm, removing the need to manually clear it. This alarm will not be displayed on the Current Alarms page.