With the following command, you load a CRL certificate called revoke.crl from the /var/tmp directory on the device. The CA profile is called ca-profile-ipsec. (Maximum file size is 5 MB.)
- user@host> request security pki crl load ca-profile
ca-profile-ipsec filename /var/tmp/revoke.crl
![]() |
Note: JUNOS software with enhanced services supports loading of CA certificates in X509, PKCS-7, DER, or PEM formats. |