Broadcom NetXtreme BCM57 Series User Manual page 46

NetXtreme User Guide
openssl rsa -in server.key.org -out server.key
5. Generate a self-signed certificate:
To generate a self-signed certificate which is active for 365 days, enter the following command:
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
The following output displays:
Signature ok
subject=/C=US/ST=California/L=Irvine/O=Broadcom Corporation/OU=Engineering/CN=MGMTAPP-
LAB3/emailAddress=
Getting Private key
6. Enter the following command to verify the generated self-signed certificate.
openssl verify server.crt
The following output displays:
server.crt:/C=US/ST=California/L=Irvine/O=Broadcom Corporation/OU=Engineering/
CN=MGMTAPP- LAB3/emailAddress=
error 18 at 0 depth lookup:self signed certificate
OK
Ignore the error message "error 18 at 0 depth lookup:self signed certificate". This error indicates that this is
a self-signed certificate.
7. Convert the certificate from "crt" to "pkcs12" format, as follows:
For a Windows server, the certificate should be in pkcs12 format. Enter the following command:
openssl pkcs12 -export -in server.crt -inkey server.key -out hostname.pfx
You will be prompted for the following:
Enter Export Password:
Verifying - Enter Export Password:
Enter the password and be sure to remember it. The password is required when importing the certificate on
the Windows server and client.
8. Make a copy of the certificate file server.crt and place it on the server where BACS will be installed, so that
it can be imported. If you plan to use a Windows or Linux client to connect to the server running BACS, then
the certificate also needs to be transferred (copied and pasted) to the client system.
In Linux, the certificate should have the extension ".pem". The extension ".crt" and ".pem" are the same, so
there is no need to use the
Note: A separate certificate must be generated for an IPv4 address, IPv6 address, and Hostname.
Import Self-Signed Certificate on Linux Client
On Linux distributions, note the following certificate directory:
• For all SuSE versions, the certificate directory is
• For Red Hat, the certificate directory can be different for each version. For some versions, it is
or
certs /etc/pki/tls/certs
Broadcom ®
April 2017 • 2CS57XX-CDUM514-R
command to convert from .crt to .pem. You can simply copy the file as-is.
openssl
/etc/ssl/certs
. For other versions, find out the certificate directory.
Linux Driver and Management Application Installation
.
/etc/ssl/
Page 46