377
Import the certificate returned from external CA
Select this option to install the certificate returned in response to a certificate
request. Make sure that the certificate is in PEM format.
Import a keypair
You can import a key pair (private and public key) from a PKCS#12 file here. Use
this option e.g. to reinstall the keys from a backup.
Please select what you want to do
-
Create a new selfsigned certificate
Please read on at
(p. 377)
-
Create a certificate request for submission to an external CA
Please read on at
(p. 377)
-
Import the certificate returned from external CA
Please read on at
(p. 378)
-
Import a keypair
Please read on at
(p. 378)
Issue self-signed certificate
On this screen you have to enter the certificate subject. Later this information will be
presented to any user connecting with this service for inspection.
CN
Issue the certificate to the address which is normally used to connect with the service
from the Internet. Usually this is the Internet DNS name of SX-GATE. You can also
issue a wildcard certificate (e.g. *.example.com).
Subject alternativ names
Most clients also consider this optional certificate property while verifying that the server
certificate belongs to the expected server. Enter all required names and IPs used to
address the server. You can also issue a wildcard certificate (e.g. *.example.com).
Key strength
Old systems like e.g. Windows XP before SP3 might only support keys with max. 2048
bit and an SHA1 hash.
Create a certificate request
On this screen you have to enter the certificate subject.
CN
Issue the certificate to the address which is normally used to connect with the service
from the Internet. Usually this is the Internet DNS name of SX-GATE. You can also
