Configure Ssl Certificate Privkeylen - Extreme Networks ExtremeWare XOS Command Reference Manual

configure ssl certificate privkeylen

configure ssl certificate privkeylen <length> country <code> organization
<org_name> common-name <name>
Description
Creates a self signed certificate and private key that can be saved in the EEPROM.
Syntax Description
length Specifies the private key length in bytes. Valid values are between 1024 and 4096.
code Specifies the country code in 2-character form.
org_name Specifies the organization name. The organization name can be up to 64 characters
long.
name Specifies the common name. The common name can be up to 64 characters long.
Default
N/A.
Usage Guidelines
This command creates a self signed certificate and private key that can be saved in the EEPROM. The
certificate generated is in the PEM format.
Any existing certificate and private key is overwritten.
The size of the certificate depends on the RSA key length (
parameters ( ,
country organization name
1024, then the certificate is approximately 1 kb. For an RSA key length of 4096, the certificate length is
approximately 2 kb, and the private key length is approximately 3 kb.
Similar to SSH2, before you can use any SSL commands, you must first download and install the
separate Extreme Networks SSH software module (ssh.xmod). This additional module allows you to
configure both SSH2 and SSL on the switch. SSL is packaged with the SSH module; therefore, if you do
not install the module, you are unable to configure SSL. If you try to execute SSL commands without
installing the module first, the switch notifies you to download and install the module. To install the
module, see the instructions in
The CNA Agent requires SSL to encrypt communication between the CNA Agent and the CNA Server.
For more information about the CNA Agent, see
Example
The following command creates an SSL certificate in the USA for a website called bigcats:
configure ssl certificate privkeylen 2048 country US organization IEEE common-name
bigcats
ExtremeWare XOS 11.3 Command Reference
, and so forth) supplied by the user. If the RSA key length is
Appendix A of the ExtremeWare XOS Concepts Guide.
Appendix
configure ssl certificate privkeylen
) and the length of the other
privkeylen
C, "CNA Agent Commands."
757