F5 520, Руководство пользователя

Страница: 42 / 61

Chapter 2
2 - 12
• The two-letter ISO code for your country
• The full name of your state or province
• The city or town name
• The name of your organization
• The division name or organizational unit
Figure 2.8 contains example entries for the server my.server.net.
To generate a key using the genkey utility
After you run the genconf utility, you can generate a key with the genkey
utility. From the command line, type the following command to run the
genkey utility:
/usr/local/bin/genkey <server_name>
For the <server_name>, type the FQDN of the server to which the
certificate applies. After the utility starts, it prompts you to verify the
information created by the genconf utility. After you run this utility, a
certificate request form is created in the following directory:
/config/bigconfig/ssl.csr/<fqdn>.csr
The <fqdn> is the fully qualified domain name of the server. Please contact
your certificate authority (CA) and follow their instructions for submitting
this request form.
In addition to creating a request form that you can submit to a certificate
authority, this utility also generates a temporary certificate. The temporary
certificate is located in:
/config/bigconfig/ssl.crt/<fqdn>.crt
The <fqdn> is the fully qualified domain name of the server.
Note that you must copy the key and certificate to the other 520/540 in a
redundant system.
This temporary certificate is good for ten years, but for an SSL proxy, you
should have a valid certificate from your certificate authority (CA).
WARNING
Be sure to keep your previous key if you are still undergoing certification.
The certificate you receive is valid only with the key that originally
generated the request.
Common Name (full qualified domain name): my.server.net
Country Name (ISO 2 letter code): US
State or Province Name (full name): WASHINGTON
Locality Name (city, town, etc.): SEATTLE
Organization Name (company): MY COMPANY
Organizational Unit Name (division): WEB UNIT
Figure 2.8 Example entries for the genconf utility