345 |341
7a:c4:f2:14:26:54:9e:d4:b5:2d:a2:c1:ab:fe:7a:2f:b8:f6:
23:08:93:fb:6b:7e:d9:14:da:09:90:50:b4:76:b0:17:e1:5f:
53:75:ee:7a:5f:85:dd:90:3c:d4:28:18:ee:5c:64:f5:09:52:
03:25:3e:f1:ed:5d:80:37:4b:ff:ad:fb:54:d0:24:11:a1:cd:
32:6c
13.5.3
SSL Certificate
Each SSL Certificate contains
•
A public/private key pair: a private key with the code and a public key used to decode it. The private
key is installed on the server and is not shared with anyone. The public key is incorporated into the
SSL certificate and shared with web browsers.
•
Identification information. E.g. When you request an SSL certificate, a third party (such as Thawte)
verifies your organization’s information and issues a unique certificate to you with that information.
SSL Certificate can be configured in Supermicro switches. The certificate should be specified in PEM
format.
Follow the steps below to configure SSL server certificate.
Step Command
Description
Step 1 ip http secure
Configure Cipher Suite and Crypto Key
RSA of your choice using “ip http
secure” command.
Step 2 ssl gen cert-req algo rsa sn
Enter the subject name and create
certificate request by using the “ssl gen
cert-req algo rsa sn” command.
Step 3 show ssl server-cert
The “show ssl server-cert” command
will display certificate request. Copy
paste these contents to a text file, say
a.csr.
Step 4 Linux commands
To generate SSL certificate openssl
application can be used. The following
steps can be executed in any linux
machine to generate SSL certificates.
For other openssl implementation refer
the openssl documentation to find the
equivalent steps.
Execute the below commands in linux
shell.
1.
openssl req -x509 -newkey
rsa:1024 -keyout cakey.pem -
out cacert.pem
2.
openssl x509 -req -in a.csr -out
cert.pem -CA cacert.pem -
CAkey cakey.pem –
Cacreateserial
This would generate certificate file
cert.pem.
