Creating And Replacing Ssl Certificates; Creating A New Self-Signed Certificate - Extreme Networks AG200 User Manual

System Administration

Creating and Replacing SSL Certificates

The Secure Sockets Layer (SSL) protocol uses encryption by way of certificates to provide security for
data or information sent over HTTP.
Certificates are digitally signed statements that verify the authenticity of a server for security purposes.
They use two keys; one public key to encrypt information and one private key to decipher that
information.
is a key and certificate management utility that allows you to create your own public and
keytool
private keys when you use self-authentication. These keys and certificates are stored in a keystore file.

Creating a New Self-signed Certificate

To generate a private keystore containing a new private key/public certificate pair:
Command line window
1 Log in as
root
2 Remove the existing keystore by entering the following at the command line:
rm -f /usr/local/nac/keystore/compliance.keystore
3 Enter the following at the command line:
keytool -genkey -keyalg RSA -alias
compliance.keystore
Where:
<key_alias> is the name for the key within the keystore file
4 The
keytool
Keystore password—Enter a password. You may want to use
■
default password of the J2SE SDK keystore.
First and Last Name—Enter the fully-qualified name of your server. This fully-qualified name
■
includes the host name and the domain name. For testing purposes on a single machine, this will
be
localhost
Organizational unit—Enter the appropriate value.
■
Organization—Enter the name of your organization.
■
City or locality—Enter the city or location.
■
State or province—Enter the unabbreviated state or province.
■
Two-letter country code—Enter a two-letter country code. The two-letter country code for the
■
United States is US.
330
to the Sentriant AG server via SSH or directly using a keyboard.
utility prompts you for the following information:
.
<key_alias>
-keystore /usr/local/nac/keystore/
changeit
to be consistent with the
Sentriant AG Users' Guide, Version 5.0