Revoking A Certificate; Using Ciphers With The Sa8220 - HP P4522A - Traffic Management Server Sa8220 User Manual

A P P E N D I X B

Revoking a Certificate

Using Ciphers with the SA8220

12. Combine the clientkey1.pem and cert.pem files into one file by
typing this command:
cat clientkey1.pem cert.pem > all.pem
13. Convert to p12 format by typing this command:
openssl pkcs12 -export -in all.pem
-out <file>.p12 -name "MY NAME"
1. To revoke a certificate, type this command:
openssl ca -revoke clientcertificate.pem
2. Generate a new CRL to incorporate the revoked certificate by
typing this command:
openssl ca -gencrl -out crl.pem
The SA8220 only supports RSA key exchange and authentication.
Diffie-Hellman (including Anonymous and Ephemeral) key
exchange/authentication and DSS authentication are not supported.
Use the set cipher command to specify the cipher. The command
prompts you for the cipher strength, as shown below.
Element Description
All All supported ciphers
High All ciphers using Triple-DES
Medium All ciphers with 128 bit encryption
Low All low strength ciphers (no export, single DES)
Export All export ciphers
The default cipher value is all supported ciphers (both SSLv2 and
SSLv3).
Revoking a Certificate
265