FUJITSU SPARC M4000 - Manual (Page 116)

2-60 SPARC Enterprise Mx000 Servers XSCF User’s Guide • April 2008
Creating a Web Server Certificate by Constructing the Self CA
■
Command operation
1. Use the sethttps (8) command to create a self-signed web server certificate by
specifying the DN.
<Example> Specify the DN (JP, Kanagawa, Kawasaki, Example,
Development, scf-host, [email protected])
XSCF> sethttps -c selfsign JP Kanagawa Kawasaki Example Development
scf-host [email protected]
CA key and CA cert already exist. Do you still wish to update? [y|n]
:y
Enter passphrase: xxxxxxxx
Verifying - Enter passphrase: xxxxxxxx
2. Use the showhttps (8) command to confirm the generated web server
certificate.
XSCF> showhttps
HTTPS status: disabled
Server key: installed in Jul 11 06:33:25 UTC 2006
CA key: installed in Jul 11 06:33:21 UTC 2006
CA cert: installed in Jul 11 06:33:21 UTC 2006
CSR:
-----BEGIN CERTIFICATE REQUEST-----
MIIByzCCATQCAQAwgYoxCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER
MA8GA1UEBxMIS2F3YXNha2kxEDAOBgNVBAoTB0ZVSklUU1UxDDAKBgNVBAsTA0VQ
:
uni/n3g2/F5Ftnjg+M4HtfzT6VwEhG01FGP4IImqKg==
-----END CERTIFICATE REQUEST-----
3. Use the sethttps (8) command to enable https.
XSCF> sethttps -c enable
4. Use the rebootxscf (8) command to reset the XSCF.
XSCF> rebootxscf
The XSCF will be reset. Continue? [y|n] :y
■ After the XSCF reset, the XSCF session is disconnected. Please log in again to the
XSCF.