Cisco Cisco Identity Services Engine 1.3 Dépliant
安全访问操作指南
步骤
1
为
pxGrid 客户端生成私钥(例如 mac.key)
openssl genrsa -out mac.key 4096
Generating RSA private key, 4096 bit long modulus
..................++
.............................++
e is 65537 (0x10001)
步骤
2
生成自签名的
CSR (mac.csr) 请求并提供质询密码(例如 cisco123)
注:质询密码将成为
keystoreFilename 密码
openssl req -new -key mac.key -out mac.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:cisco123
An optional company name []:
注:在本文档各处使用相同的密码可便于维护,并减少错误
步骤
3
生成自签名的证书公钥
/私钥对证书(例如 mac.cer)
openssl req -x509 -days 365 -key mac.key -in mac.csr -out mac.cer
步骤
4
系统将根据私钥创建
PKCS12 文件(例如 mac.p12)。
openssl pkcs12 -export -out mac.p12 -inkey mac.key -in mac.cer
Enter Export Password: cisco123
Verifying - Enter Export Password: cisco123
© 2015 思科系统公司
第
26 页