Sun Microsystems Sun SPARC Enterprise M3000 User Manual page 118

Creating a Web Server Certificate by Constructing the Self CA
■
1. Use the sethttps(8) command to create a self-signed web server certificate by
specifying the DN.
<Example> Specify the DN (JP, Kanagawa, Kawasaki, Example,
Development, scf-host, abc@example.com)
XSCF> sethttps -c selfsign JP Kanagawa Kawasaki Example Development
scf-host abc@example.com
CA key and CA cert already exist. Do you still wish to update? [y|n]
:y
Enter passphrase: xxxxxxxx
Verifying - Enter passphrase: xxxxxxxx
2. Use the showhttps(8) command to confirm the generated web server certificate.
XSCF> showhttps
HTTPS status: disabled
Server key: installed in Jul 11 06:33:25 UTC 2006
CA key: installed in Jul 11 06:33:21 UTC 2006
CA cert: installed in Jul 11 06:33:21 UTC 2006
CSR:
-----BEGIN CERTIFICATE REQUEST-----
MIIByzCCATQCAQAwgYoxCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER
MA8GA1UEBxMIS2F3YXNha2kxEDAOBgNVBAoTB0ZVSklUU1UxDDAKBgNVBAsTA0VQ
:
uni/n3g2/F5Ftnjg+M4HtfzT6VwEhG01FGP4IImqKg==
-----END CERTIFICATE REQUEST-----
3. Use the sethttps(8) command to enable https.
XSCF> sethttps -c enable
4. Use the rebootxscf(8) command to reset the XSCF.
XSCF> rebootxscf
The XSCF will be reset. Continue? [y|n] :y
After the XSCF reset, the XSCF session is disconnected. Please log in again to the
■
XSCF.
2-66 SPARC Enterprise Mx000 Servers XSCF User's Guide • August 2009
Command operation