HP StorageWorks Command View XP Advanced Edition Device Manager Server Installation and Configuration Guide (December 2005)

Command View XP AE Device Manager Server Security 103
The prompts appear generally as follows:
–You will be prompted to enter information to incorporate into the certificate request.
–This information is called a Distinguished Name or a DN.
–There are many fields however some can remain blank.
–Some fields have default values.
–Enter '.', to leave the field blank.
–-----
–Country Name (2 letter code) []:US
–State or Province Name (full name) []:Washington
–Locality Name (eg, city) []:New York
–Organization Name (eg, company) []:Hewlett-Packard
–Organizational Unit Name (eg, section) []:WebSite
–Common Name (eg, YOUR name) []:www.example.com
–Email Address []:
–
–Please enter the following 'extra' attributes
–to be sent with your certificate request
–A challenge password []:
–An optional company name []:
Figure 6-27 sslc req Utility Prompts
6-3-3 Creating a Self-signed Certificate
If you do not have a signed and trusted certificate, you can create a self-signed certificate using the
sslc x509 utility. This is useful if you want to test the web server.
The sslc x509 utility has the following format:
• sslc x509 -in CSR-file -out certificate-file -req -signkey key-file -
days valid-period
• -in CSR-file specifies the Certificate Signing Request (CSR) file to be passed to the utility.
• -out certificate-file specifies the file for containing the created self-signed certificate.
• -req indicates the request (required).
• -signkey key-file specifies the file that contains the private key.
• -days valid-period specifies the number of days during which the self-signed certificate is
valid.
For example, to create a private key when the CSR file is demoCA/httpsd.csr, the key file is
demoCA/httpsdkey.pem, and the name of the file that will contain the self-signed certificate is
demoCA/newcert.pem, the command would be:
• sslc x509 -in demoCA\httpsd.csr -out demoCA\newcert.pem -req -signkey
demoCA\httpsdkey.pem -days 365.
This would create the following output:
–Signature OK
–subject=/C=US/ST=Washington/L=New York/O=Hewlett-Packard/OU=WebSite/CN=www.example.com
Figure 6-28 Sample Output of a sslc x509 Command