6–16
MULTINET4 MULTI-PORT SERIAL SERVER & MANAGED SWITCH – INSTRUCTION MANUAL
OPERATIONAL GUIDE
CHAPTER 6: OPERATIONAL GUIDE
must tell the software that you trust the issuing entity by marking the “Trusted” checkbox
next to the certificate name and pressing the
Apply Settings
button. Again, this is required
because the certificate is self-signed and therefore its authenticity cannot be verified (that
is, anyone can generate a self-signed certificate).
Multinet4 only understands X.509 certificates that are encoded in the Privacy Enhanced
Mail (PEM) format. This is an ASCII text format that is easy to cut and paste into files or mail
messages. An example PEM-encoded X.509 certificate is shown below:
-----BEGIN CERTIFICATE-----
MIICyzCCAjQCCQDcC3lajBRvIDANBgkqhkiG9w0BAQUFADCBqTELMAkGA1UEBhMC
VVMxCzAJBgNVBAgTAk1BMRYwFAYDVQQHEw1Ob3J0aCBBbmRvdmVyMRQwEgYDVQQK
EwtEeW1lYywgSW5jLjEeMBwGA1UECxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MRow
GAYDVQQDExFNYXR0aGV3IFNjaGlja2xlcjEjMCEGCSqGSIb3DQEJARYUbXNjaGlj
a2xlckBkeW1lYy5jb20wHhcNMDYwNjI2MTgwNzQwWhcNMDYwNzI2MTgwNzQwWjCB
qTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1BMRYwFAYDVQQHEw1Ob3J0aCBBbmRv
dmVyMRQwEgYDVQQKEwtEeW1lYywgSW5jLjEeMBwGA1UECxMVQ2VydGlmaWNhdGUg
QXV0aG9yaXR5MRowGAYDVQQDExFNYXR0aGV3IFNjaGlja2xlcjEjMCEGCSqGSIb3
DQEJARYUbXNjaGlja2xlckBkeW1lYy5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0A
MIGJAoGBAL/JrmUHTDPBkzENUWWnoBjo2iD1owJd/ZYrpHvLfkg8ljdLjlGNUdBl
kwN7+IJWBq2C/cNfvfyUJ2/95a6TNYwt9/k/K3r70A6iuzFM0wVFpM0q
H7tPOFStc9IygR36FOPasCoNxze9DofIfC8IypSf28LXAgMBAAEwDQYJ
KoZIhvcNAQEFBQADgYEAEq3kTPfT5i1Z5XtXtOatCw/wDhC6DME2XY5E
OnuJchpFGgTPmA1z5neUTYT9pHX50rutrk28vvj6ELn1XLD5sp6Hqxj5Wslo4jDb
LFxgft46TUgISqRHiSbixWfsLSNqf3cpGjMQjWO8xtEExNDuk7NUVbM=
-----END CERTIFICATE-----
6.5.3.6 Multinet4 Key Files
You must generate or otherwise acquire key files for your system and install them on each
unit. This is accomplished using the Security: Keys screen.
Multinet4 requires that a key file is assigned to any serial port that will use SSL. Note, in
some connection scenarios, a key file is not strictly necessary to establish a secure
connection but a key file assignment is still required by the software because these
scenarios cannot always be predicted. Each port may have a different assigned key file.
You can enable SSL on a port and assign key files to ports using the Security: Serial screen.
Multinet4 only understands key files that are encoded in the Privacy Enhanced Mail (PEM)
format. The key file consists of multiple parts:
1.
An RSA Private Key
2.
The signed, X.509 Certificate that contains the matching public key for #1
3.
The X.509 Certificate of the root CA that signed the certificate in #2
An example key file is shown below:
-----BEGIN RSA PRIVATE KEY-----
MIICXQIBAAKBgQC8tHGfI5pGavC/WwnpOuW4sFody5e65ifeIEvvlaUE
Fe8epd2HBKm4u4T9llBAPZcy4Qi07zXjqGPlOvUf80QUT9/Rti3Nh3rAT837S8Dn
TaEJyoptixJHVmuB4KZo5T3O7t91vM7utSawCsSI5pEe0Ag6vwIDAQAB