A
CCESS
G
ATEWAY
Quick Reference Guide
255
3.
Go to the c:\cygwin\bin\ directory and run the following command:
>openssl genrsa -rand file1:file2:file3:file4:file5 1024 > cakey.pem
The following table provides an explanation of the command elements:
Command
Description
openssl
“openssl” command.
genrsa
A parameter for “openssl” to generate an RSA key.
Rand
A parameter for “openssl” to generate a random number from the files list.
file1:file2…:file5 These five large random files are residing on the workstation (large compressed log
files recommended by VeriSign). These files are entered in the key generation
command as file1:file2:file3:file4:file5
>
Output to.
cakey.pem
The file that contains the private key. You must have the file name “cakey.pem” to be
used in the Access Gateway.
Because there is a parameter buffer size limitation of the “openssl” command, the argument length should not
have more than 80 characters.
If you are creating multiple keys, please output them into different directories and save them as different
names. However, if you are saving them as different names, you must change the names back to “cakey.pem”
when trying to FTP to the Access Gateway.
Do not include “-des3” option to keep the private key in an unencrypted form.
Here is the output of cakey.pem:
Summary of Contents for AG 2300
Page 1: ......