Nortel Networks NN42030-300 manual Appendix B Self-signed certificate generation

.

59

Appendix B

Self-signed certificate generation

As an alternative to using a Certificate Authority, you can generate and use self-signed certificates.

ATTENTION

Self-signed certificates do not provide the same level of security as CA-signed certificates. Use self-signed certificates for test or demonstration purposes only.

For more information about the Java keytool, go to http://java.sun.com/ an d search on the keyword keytool.

Procedure 23

Generating self-signed certificates

Step Action

1Log on to the server as nortel.

2To become the superuser, enter the following command: su

3Change to the certificate keystore directory: cd /opt/SQMobilityGW/

4Delete the default keystore: rm .keystore

5Generate a self-signed certificate keystore and certificate:

/usr/java/jdk1.5.0_03/bin/keytool -genkey

-alias Tomcat -keyalg RSA -storepass firsthand -keypass firsthand -dname ’cn=<common name>’ -keystore .keystore -validity xxx

where

xxxrepresents the number of days until the certificate expires. The default value is

Nortel Mobile Communication 3100 Series Portfolio

Nortel Mobile Communication Gateway 3100 Installation and Upgrades

NN42030-300 02.03 Standard

9 May 2008

Copyright © 2007, 2008 Nortel Networks