Digi CM Betriebsanweisung PDF herunterladen (Seite 172)

Upload Server Certificate

172 Chapter 18

or SHI will not display this menu)

2. Copy your own server.pem file to /tmp/cnf/ using scp.

Please don't forget to run saveconf command in CLI if you want to keep

this change permanently.

You can use your own certificate for your Digi CM unit after replacing the

original server.pem on /tmp/cnf/ with your server.pem. The following procedure

is to import an SSL certificate for the HTTPS interface.

OpenSSL(SSLeay) Simple CA Usage - Install Openssl

1. Download latest openssl package

2. Install openssl package

# cd /work/

# tar -xvzf openssl-0.9.7c.tar.gz

# cd openssl-0.9.7c

# ./config

# make

# make test

# make install

Make Root CA (Certificate Authority for Self-signed)

1. Edit openssl configuration file

# vi /usr/share/ssl/openssl.cnf

Note: Modify [req_distinguished_name] section of "openssl.cnf" Please refer to sample

openssl.conf file(openssl.conf.digi). Modify [req_attributes] section of

"openssl.cnf"

challengePassword_min =0

challengePassword_max =0

2. Make self-signed Root CA(Certificate Authority)

# cd /work/openssl-0.9.7c/

# mkdir CA

# cd CA

# sh /usr/local/ssl/misc/CA.sh -newca

CA certificate filename (or enter to create)

; (Press Enter to use default value)

Making CA certificate ...

; openssl is called here as follow from CA.sh

; openssl req -new -x509 -keyout ./demoCA/private/./cakey.pem \

; -out ./demoCA/./cacert.pem -days 365

3. Use configuration from

/usr/local/ssl/lib/ssleay.cnf

4. Generate a 1024 bit RSA private key.

........++++++

......................++++++

1 2 ... 167 168 169 170 171 172 173 174 175 176 177 ... 201 202

Kommentare zu diesen Handbüchern

Keine Kommentare

Digi CM Betriebsanweisung Seite 172

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung Digi CM