test password-map

This command tests the association between an encrypted password alias and a file.

Syntax

test password-map alias type URL

Parameters

alias
Specifies the name of the candidate alias.
type
Identifies the file type. Use the value key or cert.
URL
Specifies a local URL that identifies the file that contains the certificate or key.
  • If stored in the public cryptographic area, takes the pubcert:file form.
  • If stored in the private cryptographic area, takes the file form.

Guidelines

The test password-map command tests the association between an encrypted password alias and a file. Confirms or denies that the alias references the password that protects the file.

Assuming syntactical correctness, testing a key or certificate file that does not require a password succeeds in all cases.
Note: The test password-map command cannot be used in a startup configuration. If found, the script ignores the command.

Examples

  • Indicates that towson does not reference the encrypted password that protects the dpSupplied.der certificate file. 
    # test password-map towson cert pubcert:dpSupplied.der
Alias 'towson' with file 'pubcert:dpSupplied.der' --> FAIL
  • Indicates that dundaulk references the encrypted password that protects the dpSupplied.der certificate file. 
    # test password-map dundaulk cert pubcert:dpSupplied.der
Alias 'dundaulk' with file 'pubcert:dpSupplied.der' --> OK
  • Indicates that columbia does not reference the encrypted password that protects the K2.der key file. 
    # test password-map columbia key K2.der
Alias 'columbia' with file 'K2.der' --> FAIL
  • Indicates that towson references the encrypted password that protects the K2.der key file. 
    # test password-map towson key K2.der
Alias 'towson' with file 'K2.der' --> OK