Cisco RF Gateway 1 Modules, Configuration Manual

Page: 234 / 286

Chapter 14 Secuirty Features
210 78-4025112-01 Rev H0
Enabling HTTPS on the RF Gateway 1
Steps for Enabling HTTPS
The following steps for enabling HTTPS are explained in detail in the following
sections.

Create a CA

Create a unique key and CSR for each RF Gateway 1 unit required to support
HTTPS

Sign each CSR with the CA

Download each key and certificate from the FTP server to each RF Gateway 1
unit

Import the CA certificate into each browser that you plan to use with your RF
Gateway 1 unit
In the following steps, the command prompt is shown in italics, the user input is
shown in bold, and the computer response is show in normal typeface.
Creating a CA Certificate
Create a CA certificate named ca.crt:
OpenSSL> req -new -x509 -days 365 -key ca.key -out ca.crt
Enter pass phrase for ca.key:
Loading 'screen' into random state - done
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:Kentucky
Locality Name (eg, city) []:LaRue
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Sinking Spring Farm