IBM WebSphere XS40, Справочник по командам

Страница: 255 / 1066

Use the password and password-alias properties in environments that require
password-protected files. Before using the password-alias property, use the
password-map command to 3DES-encrypt the private key password ( plaintext ) and
associate an alias with the encrypted password. An attempt to reference an
encrypted password that is not in the password map results in command failure.
v
In environments that use unencrypted passwords, the value of the password
property is used to open and read the key file.
v In environments that use encrypted passwords, the password map file is queried
for the value of the
password-alias property, and its associated encrypted
password is identified. The encrypted password, in turn, is 3DES-decrypted
using the locally generated host key to yield the plaintext password that is used
to open and read the key file.
Related Commands
password-map
Examples
v
Generates a private key and CSR for the specified server. Default conditions
apply as follows:
– The private key (1024-bits in length) is saved as
cert:sample-privkey.pem
.
– The CSR is saved as temporary:sample.csr .
– The private key file is not password protected
# keygen C au L "South Melbourne" ST Victoria
O "DataPower Australia, Ltd." OU "Customer
Support" CN www.bob.datapower.com.au
#
v
Generates a private key and CSR for the specified server with the following
options.
– The private key (2048-bits in length) is saved as
cert:bob-privkey.pem
.
– The CSR is saved as
temporary:bob.csr
.
– The private key file is password protected with the plaintext password
didgeridoo .
# keygen C au L "South
Melbourne" ST Victoria
O "DataPower Australia, Ltd." OU "Customer
Support" CN www.bob.datapower.com.au rsa 2048 out bob password
didgeridoo
#
v
Creates a new password map and generates a host key to 3DES-encrypt the
plaintext password
didgeridoo
, and associates the alias
WaltzingMatilda
with
the encrypted password.
Generates a private key and CSR for the specified server with the following
options.
– The private key (2048 bits in length) is saved as
cert:bob-privkey.pem .
– The CSR is saved as
temporary:bob.csr
.
– The private key file is password protected with the encrypted password
didgeridoo
.
# password-map
Please enter alias-name and plaintext password pairs
- Leading and trailing white space is removed
- Enter a blank alias name to finish
Alias-name: WaltzingMatilda
Plaintext password: didgeridoo
Chapter 11. Crypto configuration mode
229