Cyclades AlterPath ACS, Справочник по командам

Страница: 107 / 420

AlterPath ACS Command Reference Guide
91
Authentication
3.7 Certificate for HTTP Security
The following procedure enables you to obtain a Signed Digital Certificate. A certificate
for the HTTP security is created by a CA (Certificate Authority). Certificates are most
commonly obtained through generating public and private keys using a public key
algorithm like RSA or X.509. The keys can be generated by using a key generator
software.
Procedure
Step 1 - Enter OpenSSL command.
On a Linux computer, key generation can be done using the OpenSSL package,
through the following command:
# openssl req -new -nodes -keyout private.key -out public.csr
If this command is used, the following information is required:
The other requested information can be skipped.
The certificate signing request (CSR) generated by the command above contains
some personal (or corporate) information and its public key.
Step 2 - Submit CSR to the CA.
Parameter Description
Country Name (2 letter code) [AU]: The country code consisting of two letters.
State or Province Name (full name) [Some-
State]: Provide the full name (not the code) of the
state.
Locality Name (e.g., city) []: Enter the name of your city.
Organization Name (e.g., company) [Internet
Widgits Ltd]: Organization that you work for or want to
obtain the certificate for.
Organizational Unit Name (e.g., section) []: Department or section where you work.
Common Name (e.g., your name or your
server’s hostname) []: Name of the machine where the certificate
must be installed.
Email Address []: Your email address or the administrator’s
email address.
Table 3.9: Required information for the OpenSSL package