LAWO Ruby standard configuration, User Manual

Page: 146 / 179

ruby standard configuration User Manual Version: 6.4.0/2 146/179
9. The Web UI
9.8 Preparing a Secure Connection (for https)
The Web UI can be opened with a secure connection (SSL) if the required certificates are stored on the Power
Core device. The setup requires you to create the keys, requests and, if required, a self-signed certificate (using
OpenSSL). The commands can be entered using a PC connected to Power Core either via telnet or the device's
serial (RS 422) port. You will also need to a suitable FTP client in order to perform the file transfers.
You can find more information about OpenSSL at the following website: https://www.freebsd.org/cgi/man.cgi?
query=openssl .
It is recommended not to use keys larger than 1024 bit, as to do so may affect the system performance.
In summary, the steps are:
·
Create or adapt a config file, and copy this to Power Core using a suitable FTP client .
·
Create the necessary keys, requests and, if required, a self-signed certificate (using OpenSSL). To
enter the commands, you can either:
o
Connect your PC to the control network and open a telnet session .
o
Connect your PC directly to the RS 422 port and open a serial connection .
·
Let an external CA sign the certificate - by downloading, signing and uploading the certificate.
·
Clean up the files.
·
Cold start the Power Core device.
In more detail...
1
.
Create or adapt a config file (.conf), and copy this to the Power Core using your FTP client .
In our example, the config file is named "request.conf". The file should be created on, or copied to, the root
directory.
Power Core (root directory)
A sample configuration is as follows.
[req]
distinguished_name=req_distinguished_name
req_extensions=req_ext
prompt=no
[req_distinguished_name]
C=DE
ST=Nordrhein-Westfalen
L=Troisdorf-Spich
O=DSA-Volgmann
OU=Development
CN=RUBY-DSA-DWC0-240.internal