Cisco Cisco SF302-08PP 8-port 10 100 PoE+ Managed Switch Referencia técnica

RSA and Certificate Commands

OL-32830-01 Command Line Interface Reference Guide

824

43

•

number

—Specifies the certificate number. (Range: 1–2)

•

key-generate 

length

—Regenerates SSL RSA key and specifies the SSL's 

RSA key length. (Range: 512–2048)

The following elements can be associated with the key. When the key is 
displayed, they are also displayed.

-

cn 

common- name

—Specifies the fully qualified device URL or IP 

address. (Length: 1–64 characters).   If unspecified, defaults to the 
lowest IP address of the device (when the certificate is generated).

-

ou 

organization-unit

—Specifies the organization-unit or department 

name. (Length: 1–64 characters)

-

or 

organization

—Specifies the organization name. (Length: 1–64 

characters)

-

loc 

location

—Specifies the location or city name. (Length: 1–64 

characters)

-

st 

state

—Specifies the state or province name. (Length: 1–64 

characters)

-

cu 

country

—Specifies the country name. (Length: 2 characters)

•

duration 

days

—Specifies the number of days a certification is valid. (Range: 

30–3650)

The default SSL’s RSA key length is 1024.

If cn 

common- name

 is not specified, it defaults to the device’s lowest static IPv6 

address (when the certificate is generated), or to the device’s lowest static IPv4 
address if there is no static IPv6 address, or to 0.0.0.0 if there is no static IP 
address.

If duration 

days

 is not specified, it defaults to 365 days.

Global Configuration mode

If the RSA key does not exist, you must use the parameter key-generate.