Avaya BSGx4e CLI Guide de l'utilisateur télécharger pdf (Page 142)

SSL commands 3 Configuration commands

142 NN47928-107

ssl key

The SSL key allows the system administrator to manage a private RSA key,

which is needed by the SSL server to encrypt data. The first time the

BSGX4e is started, a randomly-seeded, 1024-bit RSA key is generated and

saved. Normally, a new private key does not need to be generated unless it

is suspected that the security of the private key had been compromised.

The RSA key is stored in the file /cf0sys/ssl/rsakey.dat.

Note: If the SSL key is deleted, new SSL connections cannot be created. To

see the status of the SSL key, enter show ssl key.

A new SSL key can be generated. The number of bits is constrained to 512,

768, 1024 or 2048. When the SSL key record is created or modified, a key

generation task is started. Key generation can take several minutes

depending on the size of the key. When key generation starts, the key used

by the SSL server is deleted; new SSL connections cannot be created until a

new key is available. When key generation completes, the RSA key used by

the SSL server is set to the newly generated key; new SSL connections can

then be created.

Syntax config ssl key <type> bits [512|768|1024|2048]

Parameters type Enter the encryption key type rsa.

bits 512|768|1024|2048

Enter the number of bit in the key.

Example > config ssl key rsa bits 768

commands

del ssl key

display ssl key

show ssl key

show ssl certificate

show ssl csr

1 2 ... 137 138 139 140 141 142 143 144 145 146 147 ... 183 184

Pas de commentaire

Avaya BSGx4e CLI Guide de l'utilisateur Page 142