THOMSON SpeedTouch 608 Cli Reference Manual page 264

IPSec Commands
subjectdn
keylen
password
email
dnsname
ipaddress
262
The DN for the certificate.
The Subject DN reflects the subject name for the requested certifi-
cate.
To be valid, the value of the parameter subjectdn must be a valid DN
in string representation as specified in RFC1779.
If used, the subject DN should at least always contain the common
name item (cn= ) and one or more of the following other items:
•
common name (cn= )
•
organization unit (ou= )
•
organization (o= )
•
locality (l= )
•
province or state (st= )
•
country (c= ).
Use commas to seperate the items and enclose all items in quotation
marks.
Specifies the keylength (in bits) of the being certified key (i.e. your
certificate). As only RSA compliant keys are supported, only
following lengths are supported: 512,1024 and 2048 (bits).
If not specified, the default keylength of 1024 bits is assumed.
The challenge password.
Specify this challenge password (only) if the CA requires a password
for revocation or automatic enrollment.
The e-Mail address for X509v3 extension.
This value might optionally be used for creating the certificate if
present. Remark that the e-Mail address is never used by the signed
CEP request.
This parameter should only be used in combination with the
dnsname, ipaddress and altsubjectdn parameters to form a
SubjectAltName X509v3 extension in the requested certificate.
The domain name for X509v3 extension.
This value can optionally be used to provide a real DNS name to the
particular VPN gate of the SpeedTouch™.
This parameter should only be used in combination with the email,
ipaddress and altsubjectdn parameters to form a SubjectAltName
X509v3 extension in the requested certificate.
The IP address name for X509v3 extension.
Optionally this parameter can be used to associate an IP address to
the real DNS name provided to the SpeedTouch™'s VPN gate.
This parameter should only be used in combination with the
dnsname, email and altsubjectdn parameters to form a
SubjectAltName X509v3 extension in the requested certificate.
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
E-DOC-CTC-20040216-0002 v1.0