Rhn Ssl Maintenance Tool Options - Red Hat NETWORK SATELLITE 5.2 - CLIENT Configuration Manual

Chapter 3. SSL Infrastructure
8. When additional Web server SSL key sets are needed, restore the build tree on a system running
the RHN SSL Maintenance Tool and repeat steps 3 through 7.

3.2.2. RHN SSL Maintenance Tool Options

The RHN SSL Maintenance Tool offers a plethora of command line options for generating your
Certificate Authority SSL key pair and managing your server SSL certificates and keys. The tool offers
essentially three command line option help listings: rhn-ssl-tool --help (general), rhn-ssl-
tool --gen-ca --help (Certificate Authority), and rhn-ssl-tool --gen-server --help
(Web server). The manual page for rhn-ssl-tool is also quite detailed and available to assist: man
rhn-ssl-tool.
The two tables below break down the options by their related task, either CA or Web server SSL key
set generation.
This set of options must be preceded by the --gen-ca argument:
Option
--gen-ca
-h, --help
-f, --force
-p=, --password=PASSWORD
-d=, --dir=BUILD_DIRECTORY
--ca-key=FILENAME
--ca-cert=FILENAME
--cert-expiration=CA_CERT_EXPIRE
--set-country=COUNTRY_CODE
--set-state=STATE_OR_PROVINCE
--set-city=CITY_OR_LOCALITY
--set-org=ORGANIZATION
14
Description
Generate a Certificate Authority (CA) key
pair and public RPM. This must be issued
with any of the remaining options in this
table.
Display the help screen with a list of base
options specific to generating and managing
a Certificate Authority.
Forcibly create a new CA private key and/or
public certificate.
The CA password. You will be prompted
for this if it's missing. Record it in a safe
manner.
Required for most commands - The
directory where certificates and RPMs are
built. The default is ./ssl-build.
The CA private key filename. The default is
RHN-ORG-PRIVATE-SSL-KEY.
The CA public certificate filename. The
default is RHN-ORG-TRUSTED-SSL-CERT.
The expiration date of the public CA
certificate. The default is the number of
days until one day prior to epoch rollover (or
01-18-2038).
The two-letter country code. The default is
US.
The state or province of the CA. The default
is ''.
The city or locality. The default is ''.
The company or organization, such as Red
Hat. The default is Example Corp. Inc.