Console - Lindy IPower Switch 4 DIN S Pro User Manual

Specifications
The server keys should be generated with "openssl genrsa". If in the generated
key file it reads only "----- BEGIN PRIVATE KEY -----" and not "----- BEGIN RSA
PRIVATE KEY -----", the key is not recognized.
ECC Certificate with Sign Request:
openssl ecparam -genkey -name prime256v1 -out server.key
openssl req -new -key server.key -out server.csr
openssl req -x509 -days 365 -key server.key -in server.csr -out server.crt
If you have created your key and certificate, both files are concatenated to one file:
Linux:
cat server.crt server.key > server.pem
Windows:
copy server.crt + server.key server.pem
The created server.pem can only be uploaded in the maintenance section of the
device.
If several certificates (Intermediate CRT's) should also be uploaded to the device,
one should make sure, that firstly the server certificate and secondly the Intermediates
are assembled , e.g:
cat server.crt IM1.crt IM2.crt server.key > server.pem
An uploaded certificate will be preserved, when a device is put back to factory de-
faults .
21
Performance Considerations
If RSA 4096 certificates are used, the first access to the web server can take 8-10
seconds, because the math unit of the embedded CPU is highly demanded. After that,
the parameters are in the SSL session cache, so all other requests are just as fast as
with other certificate lengths. For a quick response even on the first access, we recom-
mend RSA 2048-bit certificates that offer adequate security, too.
4.7

Console

For the configuration and control of the device, there is a set of commands with para-
meters that can be entered through a console. The console is available via Telnet, or
for devices with RS232 port through using a serial terminal. The communication can
also be performed automated (e.g. via scripting languages). The console features are
configured through the web interface .
31
Command Set
There are several command levels. The following commands are usable from each
level:
41