Cisco RF Gateway 1 Modules, Руководство по настройке

Страница: 235 / 286

Enabling HTTPS on the RF Gateway 1
78-4025112-01 Rev H0 211
Organizational Unit Name (eg, section) []:Log Cabin
Common Name (eg, YOUR name) []:Abraham
Email Address []:honest@abe.com
OpenSSL>
Creating a Server Key
Create a server.key and an unprotected server key name server.pem.
Server.pem, which you'll create below, is not password protected. Guard it well
because it contains your private RSA key in the clear for all to see.
OpenSSL> genrsa -des3 -out server.key 4096
Loading 'screen' into random state - done
Generating RSA private key, 4096 bit long modulus
................................................................................
................................................................................
.................++
......................................++
e is 65537 (0x10001)
Enter pass phrase for server.key:
Verifying - Enter pass phrase for server.key:
OpenSSL> rsa -in server.key -out server.pem
Enter pass phrase for server.key:
writing RSA key
OpenSSL>
Creating a CSR
Create a Certificate Signing Request named server.csr:
Recall that when using HTTPS, your browser requires that the site name match the
Common Name on the certificate. Therefore you must use the IP Address of the
RFGW-1 as the certificate Common Name below.
OpenSSL> req -new -key server.key -out server.csr
Enter pass phrase for server.key: