114 Sun Crypto Accelerator 4000 Board Installation and User’s Guide • May 2003
9. Choose a base name for the key material.
This name is appended with different suffixesto distinguish key files, certificate
request files and later on, certificatefiles from one another.
10. Provide a key length between 512 and 2048 bits.
For most web server applications, 1024 bits is sufficientlystrong, but you can choose
stronger keys if preferred.
11. Create your PEM pass phrase.
This pass phrase protectsthe key material. Be sure to select a strong pass phrase, but
one that you can remember.If you forget the pass phrase, you will be unable to
access your keys.
Caution – Youmust remember the pass phrase you enter. Without the pass phrase,
you cannot access your keys. There is no way to retrieve a lost pass phrase.
Creating a Certificate
The following procedure describes how to create the certificaterequired to enable
Apache WebServers to use the Sun Crypto Accelerator 4000 board.
Please choose a base name for the key and request file: base_name
What size would you like the RSA key to be [1024]? 1024
Using configuration from /opt/SUNWconn/cryptov2/ssl/openssl.cnf
Generating a 1024 bit RSA private key
........++++++
...................................................++++++
writing new private key to /etc/apache/keys/base_name
Enter PEM pass phrase:
Verifying password - Enter PEM pass phrase: