Cisco Cisco Identity Services Engine 1.3 전단

다운로드
페이지 36
  
 
 
安全访问操作指南
 
步骤
 1 
 pxGrid 客户端生成私钥(例如 mac.key) 
openssl genrsa -out mac.key 4096 
 
Generating RSA private key, 4096 bit long modulus 
..................++ 
.............................++ 
e is 65537 (0x10001) 
步骤
 2 
生成自签名的
 CSR (mac.csr) 请求并提供质询密码(例如 cisco123) 
注:质询密码将成为
 keystoreFilename 密码 
openssl req -new -key mac.key -out mac.csr 
 
You are about to be asked to enter information that will be incorporated 
into your certificate request. 
What you are about to enter is what is called a Distinguished Name or a DN. 
There are quite a few fields but you can leave some blank 
For some fields there will be a default value, 
If you enter '.', the field will be left blank. 
----- 
Country Name (2 letter code) [AU]: 
State or Province Name (full name) [Some-State]: 
Locality Name (eg, city) []: 
Organization Name (eg, company) [Internet Widgits Pty Ltd]: 
Organizational Unit Name (eg, section) []: 
Common Name (e.g. server FQDN or YOUR name) []: 
Email Address []: 
 
Please enter the following 'extra' attributes 
to be sent with your certificate request 
A challenge password []:cisco123 
An optional company name []: 
 
注:在本文档各处使用相同的密码可便于维护,并减少错误
 
步骤
 3 
生成自签名的证书公钥
/私钥对证书(例如 mac.cer) 
openssl req -x509 -days 365 -key mac.key -in mac.csr -out mac.cer 
步骤
 4 
系统将根据私钥创建
 PKCS12 文件(例如 mac.p12)。 
 
openssl pkcs12 -export -out mac.p12 -inkey mac.key -in mac.cer 
 
Enter Export Password: cisco123 
Verifying - Enter Export Password: cisco123 
 
 
 
 
© 2015 思科系统公司 
 26