configure ssl certificate pregenerated
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
971
configure ssl certificate pregenerated
configure ssl certificate pregenerated
Description
Obtains the pre-generated certificate from the user.
Syntax Description
This command has no arguments or variables.
Default
N/A.
Usage Guidelines
You must upload or generate a certificate for SSL server use. With this command, you copy and paste
the certificate into the command line followed by a blank line to end the command. The following
security algorithms are supported:
●
RSA for public key cryptography (generation of certificate and public-private key pair, certificate
signing). RSA key size between 1024 and 4096 bits.
●
Symmetric ciphers (for data encryption): RC4, DES, and 3DES.
●
Message Authentication Code (MAC) algorithms: MD5 and SHA.
This command is also used when downloading or uploading the configuration. Do not modify the
certificate stored in the uploaded configuration file because the certificate is signed using the issuer’s
private key.
The certificate and private key file should be in PEM format and generated using RSA as the
cryptography algorithm.
Similar to SSH2, before you can use any SSL commands, you must first download and install the
separate Extreme Networks SSH software module (ssh.xmod). This additional module allows you to
configure both SSH2 and SSL on the switch. SSL is packaged with the SSH module; therefore, if you do
not install the module, you are unable to configure SSL. If you try to execute SSL commands without
installing the module first, the switch notifies you to download and install the module. To install the
module, see the instructions in
Appendix A, “Software Upgrade and Boot Options,”
of the
ExtremeWare
XOS Concepts Guide
.
The Converged Network Analyzer (CNA) Agent requires SSL to encrypt communication between the
CNA Agent and the CNA Server. For more information about the CNA Agent, see
Appendix C, “CNA
Agent.”
