Supermicro L2/L3 Switches Configuration Guide
76
bc:8e:f2:c6:ca:f9:16:33:11:e4:cc:5f:d9:70:f6:
2a:bd:c8:ec:92:3a:5b:f1:63:a2:28:60:db:20:3b:
ef:89:4b:4d:a4:87:3d:12:01:ba:51:92:1b:46:bb:
09:81:89:94:2d:4a:3f:bc:11:ad:dd:1b:c4:5e:a2:
2c:69:71:80:d5:55:d2:2b:0d
Exponent: 65537 (0x10001)
Signature Algorithm: md5WithRSAEncryption
21:bd:73:5e:96:82:89:13:12:a6:69:e8:9c:e6:fb:a5:0f:bc:
0b:8d:fd:03:25:68:d9:09:73:58:7f:e1:30:64:d9:3a:99:63:
6b:d2:ec:37:ea:33:1e:28:11:48:26:94:13:36:aa:08:14:5a:
7a:c4:f2:14:26:54:9e:d4:b5:2d:a2:c1:ab:fe:7a:2f:b8:f6:
23:08:93:fb:6b:7e:d9:14:da:09:90:50:b4:76:b0:17:e1:5f:
53:75:ee:7a:5f:85:dd:90:3c:d4:28:18:ee:5c:64:f5:09:52:
03:25:3e:f1:ed:5d:80:37:4b:ff:ad:fb:54:d0:24:11:a1:cd:
32:6c
1.8.5.3
SSL Certificate
Each SSL Certificate contains:
•
A public/private key pair: a private key with the code and a public key used to decode it. The
private key is installed on the server and is not shared with anyone. The public key is
incorporated into the SSL certificate and is shared with web browsers.
•
Identification information. E.g. When you request an SSL certificate, a third party (such as
Thawte) verifies your organization’s information and issues a unique certificate to you with that
information.
SSL certificates can be configured in Supermicro switches. The certificate should be specified in the PEM
format.
Follow the steps below to configure an SSL server certificate.
Step Command
Description
Step 1
ip http secure
Configure the cipher suite and crypto
key RSA of your choice using the “
ip
http secure”
command.
Step 2
ssl gen cert-req algo rsa sn
Enter the subject name and create a
certificate request by using the “
ssl gen
cert-req algo rsa sn”
command.
Step 3
show ssl server-cert
The “
show ssl server-cert
” command
will display the certificate request. Copy
& paste these contents to a text file,
say a.csr.
Step 4
Linux commands
To generate an SSL certificate, an
openssl application can be used. The
following steps can be executed in any
Linux
machine
to
generate
SSL
certificates.
For
other
openssl
