User's Manual

Fortress ES-Series CLI Guide: Network Security, Authentication and Auditing
122
The -subject option is defined as X.500 Distinguished
Names and has to be a quoted string with the following format:
"/C= <country> /ST= <state> /O= <organization> /CN= <commonname> "
The -type option selects the algorithm and key length, in bits,
for the key pair to be generated for the CSR:
 rsa2048 - (the default) RSA (Rivest, Shamir and Adleman)
2048-bit
 ec256 - elliptical curve 256-bit
 ec384 - elliptical curve 384-bit
The
-newkey option allows you to generate a new public/
private key pair automatically while generating the CSR. If the
key pair already exists (see "
generate keypair"), use the key
pair name as the
CSRname and omit the -newkey option.
The
generate keypair command allows you to generate a
public/private key pair.
generate keypair -name <Keyname> -type rsa2048|ec256|ec384
View current public or private key pairs with the show keypair
command:
# show keypair
Key Type Cert
----------------------------------- ------- ----
ssl_auto_key rsa2048 yes
You can delete a public/private key pair or all key pairs:
# del keypair -name < KeyName >|-all
4.2.2 Managing Local Certificates
The Mesh Point’s self-signed certificate, used by default for the
Mesh Point GUI, is automatically generated and always
present in the local certificate store.
View current certificates with the
show certificate
command:
# show certificate
End User Certificates
---------------------
Name : ssl_auto_key
Hash : 86cef5bbcc57acf9b27613efff3697519ebc956db0b68191580b9b6c5d0e1cf1
Usage : ssl
Subject : CN=192.168.1.6, emailAddress=[e-mail]
Issuer : C=US, ST=MA, O="Fortress Technologies", OU="Gateway Security",
CN="Fortress Technologies Certificate Authority", emailAddress=[e-mail]
(cert=Not Available)
Valid as of : Sep 28 09:45:21 2012 GMT
Valid until : Oct 28 09:45:21 2012 GMT