Configuring Secure Socket Layer (SSL)

Configuring the Switch for SSL Operation

Comments on certificate fields.

There are a number arguments used in the generation of a server certificate. table 9-1, “Certificate Field Descriptions” describes these arguments.

Field Name

Description

Valid Start Date

This should be the date you desire to begin using the SSL

 

functionality.

Valid End Date

This can be any future date, however good security practices would

 

suggest a valid duration of about one year between updates of

 

passwords and keys.

Common name

This should be the IP address or domain name associated with the

 

switch. Your web browser may warn you if this field does not match

 

the URL entered into the web browser when accessing the switch

Organization

This is the name of the entity (e.g. company) where the switch is in

 

service.

Organizational

This is the name of the sub-entity (e.g. department) where the

Unit

switch is in service.

City or location

This is the name of the city where switch is in service

State name

This is the name of the state or province where switch is in service

Country code

This is the ISO two-letter country-code where switch is in service

 

 

Table 9-1. Certificate Field Descriptions

For example, to generate a key and a new host certificate:

Generate

New Key

Generate New

Certificate

Enter certificate

Arguments

Figure 5-3. Example of Generating a Self-Signed Server Host certificate on the CLI for the Switch.

5-11

Page 123
Image 123
HP 4100gl manual Certificate Field Descriptions, For example, to generate a key and a new host certificate