Generating The Certificate Authority Ssl Key Pair - Red Hat NETWORK 3.7 - CLIENT Configuration Manual

14
Option
--set-org=ORGANIZATION
--set-org-unit=SET_ORG_UNIT
--set-hostname=HOSTNAME
--set-email=EMAIL
--rpm-packager=PACKAGER
--rpm-vendor=VENDOR
,
-v --verbose
--key-only
--cert-req-only
--cert-only
--rpm-only
--no-rpm
--server-rpm=SERVER_RPM
--server-tar=SERVER_TAR
Table 3-2. SSL Web Server Options (
To use these options, insert the option and the appropriate value, if needed, after the
command and base option, where the base option is either
3.2.3. Generating the Certificate Authority SSL Key Pair
Before creating the SSL key set required by the Web server, you must have a Certificate Authority
(CA) SSL key pair generated. A CA SSL public certificate gets distributed to client systems of the
Description
The company or organization, such as Red Hat. The
default is Example Corp. Inc.
The organizational unit, such as RHN. The default is
unit.
The hostname of the RHN Server to receive the key.
The default is dynamically set to the build machine's
hostname.
The email address of the certificate contact. The
default is admin@example.corp.
Packager of the generated RPM, such as "RHN
Admin (rhn-admin@example.com)."
Vendor of the generated RPM, such as "IS/IT
Example Corp."
Display verbose messaging. Accumulative - added
"v"s result in increasing detail.
Rarely used - Generate only a server private key.
Review
--gen-server --key-only --help
more information.
Rarely used - Generate only a server certificate
request. Review
--cert-req-only --help
Rarely used - Generate only a server certificate.
Review
--gen-server --cert-only --help
more information.
Rarely used - Generate only an RPM for deployment.
Review
--gen-server --rpm-only --help
more information.
Rarely used - Conduct all server-related steps except
RPM generation.
Rarely changed - RPM name that houses the Web
server's SSL key set (the base filename, not
filename-version-release.noarch.rpm).
Rarely changed - Name of .tar archive of the Web
server's SSL key set and CA public certificate that is
used solely by the hosted RHN Proxy Server
installation routines (the base filename, not
filename-version-release.tar).
rhn-ssl-tool --gen-server --help
--gen-ca
Chapter 3. SSL Infrastructure
--gen-server
for more information.
)
or
--gen-server
for
for
for
rhn-ssl-tool
.