THOMSON SpeedTouch 608, Cli Reference Manual, Page: 263 / 490

261
IPSec Commands
E-DOC-CTC-20040216-0002 v1.0
ipsec cert cep config
Generate an offline certificate request according PKCS#10.
SYNTAX:
where:
ipsec cert cep config [url = <quoted string>]
[ca_id = <quoted string>]
[md5 = <quoted string>]
[proxy_url = <quoted string>]
[subjectdn = <distinguished name (RFC1779)>]
[keylen = <number]
[password = <password>]
[email = <quoted string>]
[dnsname = <quoted string>]
[ipaddress = <ip-address>]
[altsubjectdn = <distinguished name (RFC1779)>]
[chknonce = <{yes|no}>]
[chktid
= <{yes|no}>]
[keyusage = <quoted string>]
url The Uniform Resource Locator (URL) of the CEP entrollment script
on the CA server.
Usually the URL is of the form:
http://<host ip-address>[:<port>]/cgi-bin/pkiclient.exe
.
Make sure the server is identified by its IP address and not a DNS
name.
OPTIONAL
ca_id The Certificate Authority (CA) Identity string. Some PKIs rely on
the identity string of the CA server to identify the CA. OPTIONAL
md5 A hexadecimal value of 16 bytes, each byte seperated by “:”.
Example: 12:A4:B9:0F:58:92:EC:0F:87:DB:03:4F:8A:8B:7D:91.
Represents the Message Digest 5 (MD5) fingerprint. The
CAMD5FingerPrint is the finger print (MD5 hash) of the root CA's
certificate.
Note
The root CA will NOT be authenticated if this entry is
not specified.
OPTIONAL
proxy_url The http-proxy server URL in cases where the CA is located behind
a firewall.
Usually the URL is of the form:
<host ip-address>[<:port>]
.
If the port is not specified, the standard HTTP port number (8080) is
assumed.
Make sure the server is identified by its IP address and not by a DNS
name.
OPTIONAL