Setup guide

This document applies to Wandy RouterOS V2.8
Table of Contents
Table of Contents
Summary
Specifications
Description
Certificates
Description
Property Description
Command Description
Notes
Example
General Information
Summary
SSL (Secure Socket Layer) is a security technology to ensure encrypted transactions over a public
network. To protect the data, an encryption key should be negotiated. SSL protocol is using
Certificates to negotiate a key for data encryption.
Specifications
Packages required: system
License required: level1
certificate
Standards and Technologies: SSLv2, SSLv3, TLS
Hardware usage: high CPU usage
Description
SSL technology was first introduced by Netscape to ensure secure transactions between browsers
and web servers. When a browser requests a secure web (usually on TCP port 443), a web
server first sends a Certificate, which contains a public key for the encryption key negotiation to
take place. After the encryption key is negotiated, the web server will send the requested page
encrypted using this key to the browser (and also the browser will be able to submit its data
securely to the server)
SSL Certificate confirms the web server identity. The Certificate contains information about its
holder (like DNS name and Country), issuer (the entity has signed the Certificate) and also the
public key used to negotiate the encryption key. In order a Certificate to play its role, it should be
signed by a third party (Certificate Authority) which both parties trust. Modern browsers that
support SSL protocol have a list of the Certificate Authorities they trust (the most known and
trusted CA is VeriSign)
To use a Certificate (which contain a public key), server needs a private key. One of the keys is