Nortel Networks 4050 用户手册
578 Chapter 11 Managing certificates
320818-A
gensigned
server|client
server|client
Generates a certificate that is signed using the private
key associated with the currently selected certificate.
key associated with the currently selected certificate.
You are prompted to provide the following parameters:
<country> <state or province> <locality>
<organization> <organizational unit> <common name>
<e-mail address> <validity period> <key size> <CA cert
true|false> <serial number> <pass phrase>
<country> <state or province> <locality>
<organization> <organizational unit> <common name>
<e-mail address> <validity period> <key size> <CA cert
true|false> <serial number> <pass phrase>
•
server — generates a signed server certificate
provided with key use options that are appropriate
for server usage. Set the CA cert value to
provided with key use options that are appropriate
for server usage. Set the CA cert value to
true
if
you plan to issue your own chained server
certificates, generating them from the currently
generated server certificate.The CA cert value you
specify when generating a certificate translates into
the X509v3 Basic Constraints property in the
generated certificate. To view the properties of a
certificate available on the Nortel SNAS 4050, use
the
certificates, generating them from the currently
generated server certificate.The CA cert value you
specify when generating a certificate translates into
the X509v3 Basic Constraints property in the
generated certificate. To view the properties of a
certificate available on the Nortel SNAS 4050, use
the
/cfg/cert #/show
command.
•
client — not supported in Nortel Secure Network
Access Switch Software Release 1.0.
Access Switch Software Release 1.0.
request
Generates a certificate signing request. For more
information, see
information, see
.
sign
Signs a CSR by using the private key associated with
the currently selected certificate. You are prompted to
paste in the contents of a CSR.
the currently selected certificate. You are prompted to
paste in the contents of a CSR.
Client certificates are not supported in Nortel Secure
Network Access Switch Software Release 1.0.
Network Access Switch Software Release 1.0.
test
Generates a self-signed certificate and private key for
testing purposes. For more information, see
testing purposes. For more information, see
import
Installs a private key and certificate by downloading it
from a TFTP/FTP/SCP/SFTP server. For more
information, see
from a TFTP/FTP/SCP/SFTP server. For more
information, see
export
Exports the current key and certificate to a TFTP/FTP/
SCP/SFTP server in a format you specify. For more
information, see
SCP/SFTP server in a format you specify. For more
information, see
/cfg/cert <cert ID>
followed by: