Avaya 3050-VM, User Manual, Page: 103 / 274

To view basic information about all certificates currently added to the VPN Gateway,
use the
/info/certs
command.
4. Apply your settings.
>> SSL Settings#
apply
Changes applied successfully.
Generating client certificates
Before issuing client certificates, you should establish the means of validating the identities of
the users. The credentials users need to present to obtain a client certificate may vary,
depending on the type of service, the size of your organization, and so on.
1. Specify a CA certificate by index number to use for generating a client certificate,
and generate the client certificate.
In this example certificate number 1 is specified for generating a client certificate.
The private key corresponding with the public key in the certificate you specify is
used for signing the client certificate.
>> Main#
cfg/cert
Enter certificate number: (1-)
1
>> Certificate 1#
gensigned
Type of certificate (server/client) [client]: <press ENTER for
client certificate>
The combined length of the following parameters may not exceed
225 bytes.
Country Name (2 letter code):
State or Province Name (full name):
Locality Name (e.g., city):
Organization Name (e.g., company):
Organizational Unit Name (e.g., section):
Common Name (e.g., your name or your server's hostname):
Email Address:
Subject alternative name (blank or comma separated list of
URI:<uri>, DNS:<fqdn>, IP:<ip-address>, email:<email-address>):
To view basic information about all available certificates, use the
/info/certs
command.
Note:
Only certificates having the basic constraint CA:TRUE can be used for generating
client certificates. When generating a client certificate, the VPN Gateway
automatically checks that the current certificate has this constraint. To perform
Generating client certificates
User Guide April 2013 103