Cisco Sx350, Руководство CLI

Страница: 1050 / 1323

RSA and Certificate Commands
1049 Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
54
•
key-generate
length
—Regenerates SSL RSA key and specifies the SSL's
RSA key length. (Range: 512–2048)
The following elements can be associated with the key. When the key is
displayed, they are also displayed.
-
cn
common- name
—Specifies the fully qualified device URL or IP
address. (Length: 1–64 characters). If unspecified, defaults to the
lowest IP address of the device (when the certificate is generated).
-
ou organization-unit —Specifies the organization-unit or department
name. (Length: 1–64 characters)
-
or
organization
—Specifies the organization name. (Length: 1–64
characters)
-
loc location —Specifies the location or city name. (Length: 1–64
characters)
-
st
state
—Specifies the state or province name. (Length: 1–64
characters)
-
cu country —Specifies the country name. (Length: 2 characters)
•
duration
days
—Specifies the number of days a certification is valid. (Range:
30–3650)
Default Configuration
The default SSL’s RSA key length is 1024.
If cn
common- name
is not specified, it defaults to the device’s lowest static IPv6
address (when the certificate is generated), or to the device’s lowest static IPv4
address if there is no static IPv6 address, or to 0.0.0.0 if there is no static IP
address.
If duration days is not specified, it defaults to 365 days.
Command Mode
Global Configuration mode
User Guidelines
If the RSA key does not exist, you must use the parameter key-generate.
If both certificates 1 and 2 have been generated, use the ip https certificate
command to activate one of them.