ProCurve 800, Руководство по настройке, Страница: 314 / 406

5-50
Configuring the RADIUS Server—Without Identity Driven Manager
Manage Digital Certificates for RADIUS
11. If your certificate is not the desired format, you can convert it.
Convert from DER with this command:
For example, enter:
ProCurve NAC 800:/etc/raddb/certs# openssl x509 -in
mycertificate.der -inform DER -out mycertificate.pem
-outform PEM
Convert from PFX format with this command:
12. Alter the /etc/raddb/eap.conf file to specify the new private key and certif-
icate files. (See Appendix B, “Appendix B: Linux Commands” for vi
commands.)
a. Enter this command:
ProCurve NAC 800:/# vi /etc/raddb/eap.conf
b. Use the arrow keys or other vi commands to reach the “tls” section
of the configuration file. (See Figure 5-20.)
Syntax: openssl x509 -in < certificate_filename > -inform DER -out < certificate_
filename > -outform PEM
For
< certificate_filename >
, enter the name for the certificate
that you chose in step 8. You should change the filename
extension to reflect the changed format.
Syntax: openssl pkcs12 -in < certificate_filename >.pfx -out
< certificate_filename >.pem
For
< certificate_filename >
enter the name for the certificate
that you chose in step 8 on page 5-49. You should change the
filename extension to reflect the changed format.