Create Ca - Zte ZXR10 2900E Series Command Reference Manual

Guidelines
The SSL server function and HTTP server function are mutually exclusive.

4.46.2 create ca

Purpose
This command creates a CA certificate.
Command Mode
Global configuration mode
Syntax
create ca {<A.B.C.D/M>|<A.B.C.D>< A.B.C.D>}
Parameter Description
Parameter
<A.B.C.D/M>
<A.B.C.D>
< A.B.C.D>
Guidelines
The IP address configured in this command must be the same as the IP address of the
SSL server. The CA certificate must be created before the SSL server is enabled. The CA
certificate created includes a server certificate (/flash/data/server.pem) and root certificate
(/flash/data/root.cer). The root certificate must be imported and added to the browser
operating as the client.
Example
The following example creates a CA certificate:
zte(cfg)#config router
zte(cfg-router)#set ipp 1 ip 192.168.100.140/24
zte(cfg-router)#set ipp 1 en
zte(cfg-router)#ex
zte(cfg)#create ca 192.168.100.140/24
CA FILE for IP "192.168.100.110 "has exsit.
Enter [Yes] to create newone for IP you just type (other keys are [No]):y
ca is creating ,please wait......
Rootcafile
Servercafile
SJ-20130731155059-003|2013-11-27 (R1.0)
Description
IP address and mask
IP address
Mask
/flash/data/root.cer, has created!
/flash/data/server.pem, has created!
Chapter 4 Service Configuration
4-611
ZTE Proprietary and Confidential