HP 6200YL, Справочное руководство

Страница: 140 / 765

crypto
OVERVIEW
SSH Category:
config Primary context:
the section called “crypto” (page 544) Related Commands
autorun (page 68)
Usage: crypto host-cert generate self-signed [START END CNAME OU ORG
CITY STATE COUNTRY]
crypto host-cert zeroize
crypto key generate <ssh [rsa] | cert [rsa] KEYSIZE | autorun-key [rsa]>
crypto key zeroize <ssh | cert | autorun>
Description: Install or remove authentication files for ssh or https server
or for autorun
Parameters:
o host-cert - operation on the https host certificate file. The host
certificate file cannot be created before the certificate
rsa key file has been created.
o key - operation on an ssh or https rsa key file.
o generate - install new key or self-signed certificate.
Note: installing a new key may be very slow in the first few
minutes after booting the device.
o zeroize - remove an existing key or certificate file.
o self-signed - install new self-signed certificate.
o START - certificate will be valid beginning on this date.
o END - certificate will be valid until this date.
o CNAME - the name (IP address) of this device.
o OU - organizational unit or department.
o ORG - organization name.
o CITY - city or location.
o STATE - state or region.
o COUNTRY - two character ISO country code.
Typing 'x<TAB>' will
provide a list of all valid country codes beginning with
the letter x.
o ssh - Install/remove host key for ssh server.
o cert - Install/remove rsa key for https certificate.
o autorun-key - Install/remove rsa key for autorun.
o rsa - optional keyword indicating key type (only rsa is available).
o KEYSIZE - for a certificate key, the size of the key desired.
Certificate keys may be 512, 768, or 1024 bits. (Ssh host
keys are always 896 bits.)
COMMAND STRUCTURE
■
crypto host-cert -- Install/remove self-signed certificate for https. (p. 146)
■
generate -- Create a self-signed certificate for the https server. (p. 146)
■
self-signed -- Create a self-signed certificate for the https server. (p. 148)
■
start-date -- Validity start date for certificate. (MM/DD[/[YY]YY]) (p. 148)
■
end-date -- Validity end date for certificate. (MM/DD[/[YY]YY]) (p. 146)
138 © 2009 Hewlett-Packard Development Company, L.P.