Chapter 102 Ssl Commands - D-Link xStack DGS-3620 Reference Manual

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide

Chapter 102 SSL Commands

download ssl certificate <ipaddr> certfilename <path_filename 64> {keyfilename <path_filename
64>}
enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA |
DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5 |
RSA_with_RC4_128_SHA}}
disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA |
DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5 |
RSA_with_RC4_128_SHA}}
show ssl {certificate {[chain | <path_filename 64>]}}
show ssl cachetimeout
config ssl cachetimeout <value 60-86400>
config ssl certificate chain [default | <cert_list>]
delete ssl certificate <path_filename 64>
102-1 download ssl certificate
Description
This command is used to download specified certificates to a device according to the desired key
exchange algorithm. For RSA key exchange, a user must download an RSA type certificate and
for DHS_DSS must use the DSA certificate for key exchange.
Format
download ssl certificate <ipaddr> certfilename <path_filename 64> {keyfilename
<path_filename 64>}
Parameters
<ipaddr> - Enter the TFTP server IP address.
certfilename - Specifies the desired certificate file name and the certificate file path in respect to
the TFTP server root path. Input characters with a maximum of 64 octets.
<path_filename 64> - Enter the desired certificate file name and the certificate file path in
respect to the TFTP server root path. Input characters with a maximum of 64 octets. The
certificate file name can be up to 64 characters long.
keyfilename - (Optional) Specifies the private key file name which accompanies the certificate
and the private key file path in respect to the TFTP server root path. Input characters with a
maximum of 64 octets.
<path_filename 64> - Enter the private key file name which accompanies the certificate and
the private key file path in respect to the TFTP server root path. Input characters with a
maximum of 64 octets. The private key file name can be up to 64 characters long.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.
Example
To download a certificate from a TFTP server:
1135