Support for x509v3-rsa2048-sha256 host key

Version 33.2.1 adds support for the x509v3-rsa2048-sha256 host key. The SSH server can present its x509v3 certificate (host key) to clients, and external SSH clients can authenticate the SSH server with the server's x509v3 certificate.

Supported Platforms

All platforms.

New CLI Command

configure ssh2 x509v3 key algorithm

Modified CLI Command

The configure ssl csr, download ssl certificate, show ssl, and show ssl csr commands add the ssh keyword to the syntax:

configure ssl csr {ssh} privkeylen length country code organization org_name common-name name
download ssl ip_address certificate csr-cert {ssh} file_name {ocsp [on | off]
show ssl {manufacturing} {certificate {ssh} | detail}

9039150-00 Rev AA