configure ssl certificate privkeylen

configure ssl certificate privkeylen length country code organization org_name common-name name

Description

Creates a self-signed certificate and private key that can be saved in the EEPROM.

Syntax Description

length Specifies the private key length in bytes. Valid values are between 2,048 and 4,096.
code Specifies the country code in 2-character form.
org_name Specifies the organization name. The organization name can be up to 64 characters long.
name Specifies the common name. The common name can be up to 64 characters long.

Default

N/A.

Usage Guidelines

This command creates a self signed certificate and private key that can be saved in the EEPROM. The certificate generated is in the PEM format.

Any existing certificate and private key is overwritten.

The size of the certificate depends on the RSA key length (privkeylen) and the length of the other parameters (country, organization name, and so forth) supplied by the user. For an RSA key length of 4,096, the certificate length is approximately 2 Kb, and the private key length is approximately 3 Kb.

Example

The following example creates an SSL certificate in the USA for a website called bigcats:

configure ssl certificate privkeylen 2048 country US organization IEEE common-name bigcats

History

This command was first available in the ExtremeXOS 11.2 and supported with the SSH module.

Platform Availability

This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, X870, 5320, 5420, and 5520 series switches.