Implementing Secure Socket Layer On Cisco Ios Xr Software - Cisco IOS XR Configuration Manual

Implementing Secure Socket Layer on
Cisco IOS XR Software
The Secure Socket Layer (SSL) protocol and Transport Layer Security (TLS) are application-level
protocols that provide for secure communication between a client and server by allowing mutual
authentication, the use of hash for integrity, and encryption for privacy. SSL and TLS rely on certificates,
public keys, and private keys.
Certificates are similar to digital ID cards. They prove the identity of the server to clients. Certificates
are issued by certification authorities (CAs), such as VeriSign or Thawte. Each certificate includes the
name of the authority that issued it, the name of the entity to which the certificate was issued, the entity's
public key, and time stamps that indicate the certificate's expiration date.
Public and private keys are the ciphers used to encrypt and decrypt information. Although the public key
is shared quite freely, the private key is never given out. Each public-private key pair works together:
Data encrypted with the public key can be decrypted only with the private key.
This module describes the tasks that you need to implement SSL on your Cisco IOS XR network.
For a complete description of the Public Key Infrastructure (PKI) commands used in this chapter, see
Note
the Public Key Infrastructure Commands on Cisco IOS XR Software module of the Cisco IOS XR System
Security Command Reference publication. For information on SSL commands, see the Secure Socket
Layer Protocol Commands on Cisco IOS XR Software module of the Cisco IOS XR System Security
Command Reference publication. To locate documentation of other commands that appear in this
chapter, use the command reference master index, or search online.
Feature History for Implementing Secure Socket Layer on Cisco IOS XR Software
Release
Release 2.0
Release 3.0
Release 3.2
Release 3.3.0
Release 3.4.0
Release 3.5.0
Modification
This feature was introduced on the Cisco CRS-1.
No modification.
Support was added for the Cisco XR 12000 Series Router.
No modification.
No modification.
No modification.
Cisco IOS XR System Security Configuration Guide
SC-159