CLI Reference Guide 4. System Commands
Version 6.4 55 January 2012
4.12 tls
This command configures Transport Layer Security (TLS).
Syntax:
This configuration set includes the following sub-commands:
analyze
set pkey-size <512 | 768 | 1024 | 2048>
generate <subject-name>
signing-request subject <subject-name>
signing-request interactive
set pkey-passphrase <passphrase>
set require-strict-cert <on | off>
set version <SSL2.0-3.0_and_TLS1.0 | TLS1.0_only>
set client-cipher-string <cipher-string>
set aupd-verify-cert <on | off>
Command Description
analyze Displays information about the currently-loaded certificate and
private key. These files may be replaced using the "copy"
command at the Enabled mode prompt.
pkey-size Controls the size (in bits) of the RSA key created by the
"generate" subcommand.
generate Erases the old private key and certificate; generates a new
random private key and creates a new self-signed certificate.
signing-request Creates a Certificate Signing Request (CSR) for use by an
organizational PKI. The "interactive" variant of this command
enters a question-and-answer dialogue for the various fields of
the CSR. In contrast, the "subject" variant of this command
allows specifying just the Common Name (CN) of the
certificate subject.
pkey-passphrase Configures a short pass-phrase used for decoding loaded
private keys (via the "copy" command).
require-strict-cert Enables strict validation of peer certificates received in the
TLS handshake. Strict validation includes the keyUsage
attribute and the authority's allowed depth.
version Selects which TLS versions are allowed.
client-cipher-string Selects cipher-suites used by the Automatic Update facility.
See the Product Reference Manual for further information.
aupd-verify-cert Enables certificate validation when connecting to remote
HTTPS sites using the Automatic Update facility.
Command Modes
Enable
To Next Page
Loading...
