Arbiter Systems 1084A, Инструкции по эксплуатации

Страница: 239 / 256

C.19 Option 34: NTP/PTP Server 219
C.19.6 HTTPS/SSL Certificate
This section discusses a method of generating a PEM file for use with HTTPS. As is the case
with any web server, in order to provide a secure connection via HTTPS, the Option 34 must be
configured with an SSL Certificate. The Option 34 uses a single PEM File which includes the
private key and the certificate. This guide illustrates a method of creating a PEM File using the
free and publicly available OpenSSL package. OpenSSL is merely one of many possible solutions –
please see your toolkit documentation for exact instructions. This guide assumes you have already
downloaded and installed the OpenSSL tools on a Linux system.
Note: In the following examples, the symbol ‘ B ’ denotes the command prompt.
Step 1 - Generate a Private Key
The following command will generate a 1024 bit RSA private key. Please keep this file safe, secure,
and not accessible to the public.
B
openssl genrsa -out private.key 1024
The generated file (private.key) might look like the following:
-----BEGIN RSA PRIVATE KEY-----
MIICXgIBAAKBgQDPoNigXmq2JAlw9DrD0P5Og5c5xsEnt9bPjfuE7MGkDEGN09sC
...more data...
8Xxzzgu4xizBdLmONkHu7b/h7GL6u5smkWVOCesCCR0mKw==
-----END RSA PRIVATE KEY-----
Step 2 - Generate a Certificate Signing Request (CSR)
The following command will generate a CSR (certificate signing request) file using the private key
generated in Step 1. OpenSSL will prompt for several pieces of information, our example responses
are in BOLD text. If you are purchasing a certificate from a commercial vendor, the information
provided during this step must match exactly the information you will be providing to the vendor.
B
openssl req -new -key private.key -out my.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
-----
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:California
Locality Name (eg, city) [ ]:Paso Robles
Organization Name (eg, company) [Widgits Pty Ltd]:Arbiter Systems, Inc.