ZyXEL NSA-2400 ユーザーガイド
Chapter 8 Maintenance Screens
NSA-2400 User’s Guide
123
8.4.4 Example: Creating a Private Key File and Certificate
This example is for Windows users. Linux users may use the openssl package which can
perform the same function.
perform the same function.
"
Links and commands are given as an example only and are correct at the time
of writing. They may be liable to change without notice.
of writing. They may be liable to change without notice.
1 Download http://www.slproweb.com/download/Win32OpenSSL_Light-0_9_8g.exe.
This will install an openssl.exe file which you can execute at the command prompt in
Windows. The default location is C:\OpenSSL\bin\openssl.exe.
Windows. The default location is C:\OpenSSL\bin\openssl.exe.
2 Click Start > Run, and then type C:\OpenSSL\bin\openssl.exe. (Do not open
the Windows command prompt and navigate to C:\openssl\bin to execute openssl.exe.)
3 A command prompt window should appear displaying openSSL> as the prompt.
4 Enter this command at the command prompt:
4 Enter this command at the command prompt:
openSSL>req -new -x509 -nodes -keyout myssl.key -out
myssl.csr
5 Now you are requested to enter some personal information to associate your
identification with the SSL Key. Note for the Common Name, you must type your
NSA's Fully Qualified Domain Name (FQDN). For example, if your NSA-2400’s
domain name is nsa.zyxel.com then make sure the common name is exactly the
same. This is important as otherwise your certificate will have a domain name mismatch.
NSA's Fully Qualified Domain Name (FQDN). For example, if your NSA-2400’s
domain name is nsa.zyxel.com then make sure the common name is exactly the
same. This is important as otherwise your certificate will have a domain name mismatch.
OpenSSL> req -new -x509 -nodes -keyout myssl.key -out myssl.csr
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.....................++++++
...........................................................++++++
writing new private key to 'myssl.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:
OpenSSL>