check-dates
This command controls whether to check
the current date against the NotBefore value and
the NotAfter value in the X.509 certificates and
CRLs during certificate validation.
Syntax
check-dates { on | off }
Parameters
on- Checks the current date against the
NotBeforevalue and theNotAftervalue in the X.509 certificates and CRLs during certificate validation. If the certificate is expired, validation fails. This setting is the default value. off- Does not check the current date against the
NotBeforevalue and theNotAftervalue in the X.509 certificates and CRLs during certificate validation. If a certificate is expired, it can still be accepted and validated during certificate validation without causing validation failure.
Guidelines
The check-dates command
controls whether to check the current date and time against the activation
date (the
NotBefore value in the certificate) and
the expiration date (the NotAfter value in the certificate)
in the X.509 certificates and CRLs during certificate validation.- When enabled, expired certificates causes the validation to fail during certificate validation.
- When disabled, expired certificates can be accepted and validated during certificate validation without causing the validation to fail.
Example
Allow the expired certificates to
be accepted and validated during certificate validation.
# check-dates off