Linux Driver and Management Application Installation
NetXtreme
User Guide
Broadcom
®
April 2017 • 2CS57XX-CDUM514-R
Page 46
openssl rsa -in server.key.org -out server.key
5.
Generate a self-signed certificate:
To generate a self-signed certificate which is active for 365 days, enter the following command:
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
The following output displays:
Signature ok
subject=/C=US/ST=California/L=Irvine/O=Broadcom Corporation/OU=Engineering/CN=MGMTAPP-
LAB3/emailAddress=
Getting Private key
6.
Enter the following command to verify the generated self-signed certificate.
openssl verify server.crt
The following output displays:
server.crt:/C=US/ST=California/L=Irvine/O=Broadcom Corporation/OU=Engineering/
CN=MGMTAPP- LAB3/emailAddress=
error 18 at 0 depth lookup:self signed certificate
OK
Ignore the error message “error 18 at 0 depth lookup:self signed certificate”. This error indicates that this is
a self-signed certificate.
7.
Convert the certificate from “crt” to “pkcs12” format, as follows:
For a Windows server, the certificate should be in pkcs12 format. Enter the following command:
openssl pkcs12 -export -in server.crt -inkey server.key -out hostname.pfx
You will be prompted for the following:
Enter Export Password:
Verifying - Enter Export Password:
Enter the password and be sure to remember it. The password is required when importing the certificate on
the Windows server and client.
8.
Make a copy of the certificate file server.crt and place it on the server where BACS will be installed, so that
it can be imported. If you plan to use a Windows or Linux client to connect to the server running BACS, then
the certificate also needs to be transferred (copied and pasted) to the client system.
In Linux, the certificate should have the extension “.pem”. The extension “.crt” and “.pem” are the same, so
there is no need to use the
openssl
command to convert from .crt to .pem. You can simply copy the file as-is.
Import Self-Signed Certificate on Linux Client
On Linux distributions, note the following certificate directory:
• For all SuSE versions, the certificate directory is
/etc/ssl/certs
.
• For Red Hat, the certificate directory can be different for each version. For some versions, it is
/etc/ssl/
certs
or
/etc/pki/tls/certs
. For other versions, find out the certificate directory.
Note:
A separate certificate must be generated for an IPv4 address, IPv6 address, and Hostname.
Summary of Contents for NetXtreme BCM57 Series
Page 1: ...Broadcom NetXtreme BCM57XX User Guide Last revised April 2017 2CS57XX CDUM514 R...
Page 16: ...Functionality and Features NetXtreme User Guide Broadcom April 2017 2CS57XX CDUM514 R Page 16...
Page 169: ...Regulatory Information NetXtreme User Guide Broadcom April 2017 2CS57XX CDUM514 R Page 169...
Page 170: ...Regulatory Information NetXtreme User Guide Broadcom April 2017 2CS57XX CDUM514 R Page 170...
Page 171: ...Regulatory Information NetXtreme User Guide Broadcom April 2017 2CS57XX CDUM514 R Page 171...
