Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 217

Implementing Secure Socket Layer on
Cisco IOS XR Software
This module describes how to implement SSL on Cisco IOS XR Software.
The Secure Socket Layer (SSL) protocol and Transport Layer Security (TLS) are application-level
protocols that provide for secure communication between a client and server by allowing mutual
authentication, the use of hash for integrity, and encryption for privacy. SSL and TLS rely on certificates,
public keys, and private keys.
Certificates are similar to digital ID cards. They prove the identity of the server to clients. Certificates
are issued by certification authorities (CAs), such as VeriSign or Thawte. Each certificate includes the
name of the authority that issued it, the name of the entity to which the certificate was issued, the entity's
public key, and time stamps that indicate the certificate's expiration date.
Public and private keys are the ciphers used to encrypt and decrypt information. Although the public key
is shared quite freely, the private key is never given out. Each public-private key pair works together:
Data encrypted with the public key can be decrypted only with the private key.
Note For a complete description of the Public Key Infrastructure (PKI) commands used in this chapter, see
the Public Key Infrastructure Commands on Cisco IOS XR Software module of Cisco IOS XR System
Security Command Reference. For information on SSL commands, see the Secure Socket Layer Protocol
Commands on Cisco IOS XR Software module of Cisco IOS XR System Security Command Reference.
To locate documentation of other commands that appear in this chapter, use the command reference
master index, or search online.
Feature History for Implementing Secure Socket Layer on Cisco CRS-1
Release
Release 2.0
Release 3.0
Release 3.2
Release 3.3.0
Release 3.4.0
Release 3.5.0
Release 3.6.0
Release 3.7.0
OL-20382-01
Modification
This feature was introduced on the Cisco CRS-1.
No modification.
No modification.
No modification.
No modification.
No modification.
No modification.
No modification.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-211