Arbiter Systems 1084A, Operation Manuals

Page: 240 / 256

220 Options List
Organizational Unit Name (eg, section) [ ]:Lab
Common Name (eg, YOUR name) [ ]:
Email Address [ ]: techsupport@arbiter.com
Please enter the following ‘extra’ attributes
to be sent with your certificate request
A challenge password [ ]:
An optional company name [ ]:
The generated file (my.csr) might look like the following:
-----BEGIN CERTIFICATE REQUEST-----
MIIBsDCCARkCAQAwcDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWEx
...more data...
YA/JCw==
-----END CERTIFICATE REQUEST-----
Step 3A - Purchase a Certificate
To prevent web browsers from warning users about untrusted certificates, an SSL Certificate must
be purchased from a trusted authority. If you do not require this level of protection, you may go
to Step 3B (Generate a Self Signed Certificate).
Most certificate vendors will ask for the generated CSR file (from Step 2) to be pasted into a
field in a web page during the purchase procedure. Be sure to copy the entire contents of the file
(including the BEGIN and END tags with the dashes) into the vendor’s web form.
Once the purchase has been completed, and other verification steps completed (this will vary
from vendor to vendor), they will provide you with a certificate file. You may skip to Step 4.
Step 3B - Generate a Self Signed Certificate
If you do not need a commercially purchased certificate, the following command will generate a Self
Signed Certificate using the files created from steps 1 and 2. Most web browsers will warn users
that the certificate is not trusted or signed by a trusted authority. Also note that the certificate
generated will be valid for 365 days. After this period, users will be additionally warned about an
expired certificate until a new certificate is generated and uploaded to the Option 34.
B
openssl x509 -req -days 365 -in my.csr -signkey private.key -out my.crt
The generated file (my.crt) might look like the following:
-----BEGIN CERTIFICATE-----
MIICVzCCAcACCQC7ujANBgkqhkiG9w0BAQUFADBwMQswCQYDVQQGEwJV
...more data...
Jo+H1MXknNISZtcu/xb9gghHG42veveZSg72
-----END CERTIFICATE-----