CSS - Delete certificate file

[kurtdeneef]

Hello,

I would like to clean up my Ciisco CSS and remove all certificate files which were uploaded once and are not in use anymore.Can anyone tell me how i can do that? (procedure,command,...)

Thanks in advance,

Kurt De Neef

[Gilles Dufour]

Use the following command

ap_file delete c:/CertStore/ssl/

This is llama/debug command.

If you want to delete all files use the following command

CSS11503# llama

CSS11503(debug)# ssl clearfiles

Gilles.

Thanks for rating this answer.

[kurtdeneef]

Hi Gilles,

thank you for your feedback.

But when I run the command, I do have the following error.

XXXXXXXX # expert

XXXXXXXX # llama

XXXXXXXX(debug)# ap_file delete c:/CertStore/ssl/caverisign.cer

You are not allowed to delete files in the CertStore directory

I was in expert mode before running llama command and the file is not used anymore in the config (sh run).

Any idea?

Kind regards,

Kurt

[Gilles Dufour]

Kurt,

sorry - this was the old way.

The new way is more simple.

CSS11503# clear ssl file

Gilles.

[kurtdeneef]

Hi Gilles,

I'm here again. :)

##### clear ssl file c:/CertStore/ssl/verisignca.cer

^

%% Invalid input detected at '^' marker.

It does not seem to be a valid command.

I found "ssl clearfiles" but it deletes all certificate files and not just one as I which.

What am i doing wrong here...?

Any idea?

I'm aware of the fact that there may not be any associations with the certificate.

I will check this.

I can always try to get into the directory and then execute the command.

Meanwhile,comments are welcome.

Thanks already for your support.

Kind regards,

Kurt

[kurtdeneef]

Gilles,

I found it.

Your simple command worked fine namely "clear ssl files" but i was still in debug mode (llama) and the command is not accepted then.

So it works now.

Thanks again,great support.

Kind regards,

Kurt

[astrand]

Hi,

I have tried using the "clear ssl file" command to remove an old RSA key pair file. However, this requires me to "enter the password used to 3DES encode the file". Unfortunately, I do not have the password any more. Is there a way to remove the ssl file anyway (without removing other files)?

Thanks in advance!

Regards,

Harald