Cisco Headend System Release 2.7 Guia Da Instalação
Good to Know
4038415 Rev A
125
Generate the CSR
1 Type the following command and then press Enter to create the request with an
aes256 certificate. (You will be asked to create a passphrase.)
openssl genrsa -aes256 -out server.key 1024
Note: On the SR 4.3.1 DNCS system, you may receive an error about SUNWcry.
In this case you can alternatively create a request with a 3DES key (you will be
asked to create a passphrase). See Troubleshooting SSL (on page 121) (third
bullet) for more details.
In this case you can alternatively create a request with a 3DES key (you will be
asked to create a passphrase). See Troubleshooting SSL (on page 121) (third
bullet) for more details.
2 Type the following command and then press Enter to generate the CSR using the
server.key.
openssl req -new -key server.key -out server.csr
Note: You will be asked to provide subject fields for the CSR, which include the
following:
following:
Country Name: US
State: Pennsylvania
Locality Name: Philadelphia
Organization Name: Comcast Cable Communications Management LLC
Organizational Unit Name: CET
Common Name: [FQDN such as: service.comcast.net]
Email Address: admin@cable.comcast.net
A challenge password: .[input a period "." to leave blank and not use the
default]
default]
An optional company name: .[input a period "." to leave blank and not use
the default]
the default]
3 Type the following commands and then press Enter to examine the server.key
and the certificate request. (You will be asked to enter the passphrase for
server.key)
server.key)
openssl rsa -text -in server.key
openssl req -text -in server.csr