15: Security in Detail
EDS User Guide
147
Generate a self-signed RSA certificate/key combo:
openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout
mp_key.pem -out mp_cert.pem
Steel Belted Radius
Steel Belted Radius (SBR) is a commercial radius server by Juniper Networks that
provides a GUI administration interface. It also provides a certificate request and self-
signed certificate generator. The self-signed certificate has extension .
sbrpvk
and is
in the PKCS12 format. OpenSSL can convert this into a PEM format certificate and
key:
openssl pkcs12 -in sbr_certkey.sbrpvk -nodes -out
sbr_certkey.pem
The
sbr_certkey.pem
file contains both certificate and key. If loading the SBR
certificate into EDS as an authority, you will need to edit it.
1. Open the file in any plain text editor.
2. Delete all info before
"----- BEGIN CERTIFICATE-----"and
after
"-----
END CERTIFICATE-----", and
then save as
sbr_cert.pem
.
SBR accepts trusted-root certificates in the DER format. Again, OpenSSL can
convert any format into DER:
openssl x509 -inform pem -in mp_cert.pem -outform der -out
mp_cert.der
Note
: With SBR, when the identity information includes special characters such as
dashes and periods, SBR changes the format it uses to store these strings
and becomes incompatible with the current EDS release. We will add support
for this and other formats in future releases.
FreeRadius
Free Radius is a Linux open-source Radius server. It is versatile, but complicated to
configure.
Содержание EDS32PR
Страница 37: ...5 Installation of EDS8PR EDS16PR or EDS32PR EDS User Guide 37 Figure 5 4 Example of EDS16PR Connections...
Страница 42: ...7 Configuration Using Web Manager EDS User Guide 42 Figure 7 1 The EDS Web Manager Status Home Page...
Страница 116: ...12 Maintenance and Diagnostics Settings EDS User Guide 116 Figure 12 16 Diagnostics Buffer Pools...
