ALM-15795008 hwPKICrlNearlyExpired

Description

PKI/4/PKICRLNEARLYEXPIRED: OID [oid] the crl is nearly expired. (CrlIssuer=[crlissuer], CrlStartTime=[crlstarttime], CrlFinishTime=[crlfinishtime])

The CRL is about to expire

Attribute

Alarm ID	OID	Alarm Severity	Alarm Type
15795008	1.3.6.1.4.1.2011.6.122.34.0.2.17	Warning	Communication alarm

Parameters

Name	Meaning
oid	Indicates the MIB object ID of the alarm.
crlissuer	Indicates the issuer of the CRL.
crlstarttime	Indicates the start time of the CRL.
crlfinishtime	Indicates the end time of the CRL.

Impact on the System

The service becomes invalid.

Possible Causes

The CRL is to expire. The CRL expiration time is less than 2 hours ahead of the current system time.

Procedure

Run the display clock command to check whether the device time is correct.If not, run the clock datetime command in the user view to change the device time.
Obtain a new CRL. For details, see "Configuring Local Certificate Check" in Huawei AR SeriesV300R021 Configuration Guide - PKI Configuration.