Cisco Cisco Prime Optical 9.6 Guide Du Développeur
Cisco Prime Optical 9.6.3 GateWay/CORBA Programmer Reference Guide
OL-28047-01
738
What is the name of your State or Province?
[Unknown]:
What is the two-letter country code for this unit?
[Unknown]:
Is <CN=gateway corba server, OU=Unknown, O=cisco, L=Unknown,
ST=Unknown, C=Unknown> correct?
ST=Unknown, C=Unknown> correct?
[no]: y
Step 2
Verify that the generated keystore and key have the following attributes:
Keystore name: gwcorba_service_ks
Alias: gwcorba_service
Keystore password: gwcorba_service_ks_pass
Key password: gwcorba_service_ks_pass
Validity: 25000 days
Step 3
Enter the following command to generate a server-side certificate that will be
issued to the client:
keytool -export -keystore gwcorba_service_ks -alias gwcorba_service
-storepass gwcorba_service_ks_pass -file gwcorba_service_cert
-storepass gwcorba_service_ks_pass -file gwcorba_service_cert
Certificate stored in file <gwcorba_service_cert>
Step 4
Verify that the certificate is stored in the gwcorba_service_cert file. The server-side
certificate and keystore are present in the /opt/CiscoTransportManagerServer/cfg
directory.
6.13.2 Generating the Client-Side Certificate
Note the following conventions:
• ascii_client_ks—Denotes a client-side keystore.
• ascii_client_ks—Denotes a client-side keystore.
• ascii_client_cert—Denotes a client-side certificate.
• gwcorba_service_ks—Denotes a server-side keystore.
• gwcorba_service_cert—Denotes a server-side certificate.
Step 1
Enter the keytool command to generate a keystore:
keytool -genkey -alias ascii_client -validity 25000 -keystore
ascii_client_ks -storepass ascii_client_ks_pass -keypass
ascii_client_ks_pass
ascii_client_ks -storepass ascii_client_ks_pass -keypass
ascii_client_ks_pass
What is your first and last name?
[Unknown]: ascii client
What is the name of your organizational unit?
[Unknown]:
What is the name of your organization?
[Unknown]: cisco