D-Link xStack DGS-3620 Series - Chapter 105 SSL Commands

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
1166
Chapter 105 SSL Commands
download ssl certificate <ipaddr> certfilename <path_filename 64> {keyfilename <path_filename
64>}
enable ssl [all | {ssl3.0 | tls1.0 | tls1.1 | tls1.2} {ciphersuite {RSA_with_RC4_128_MD5 |
RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA |
RSA_EXPORT_with_RC4_40_MD5 | RSA_with_RC4_128_SHA |
RSA_with_AES_128_CBC_SHA | RSA_with_AES_128_CBC_SHA256 |
RSA_with_AES_256_CBC_SHA | RSA_with_AES_256_CBC_SHA256 |
DHE_DSS_with_AES_256_CBC_SHA | DHE_RSA_with_AES_256_CBC_SHA}}
disable ssl version [all | {ssl3.0 | tls1.0 | tls1.1 | tls1.2} {ciphersuite {RSA_with_RC4_128_MD5 |
RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA |
RSA_EXPORT_with_RC4_40_MD5 | RSA_with_RC4_128_SHA |
RSA_with_AES_128_CBC_SHA | RSA_with_AES_128_CBC_SHA256 |
RSA_with_AES_256_CBC_SHA | RSA_with_AES_256_CBC_SHA256 |
DHE_DSS_with_AES_256_CBC_SHA | DHE_RSA_with_AES_256_CBC_SHA}}
show ssl {certificate {[chain | <path_filename 64>]}}
show ssl cachetimeout
config ssl cachetimeout <value 60-86400>
config ssl certificate chain [default | <cert_list>]
delete ssl certificate <path_filename 64>
105-1 download ssl certificate
Description
This command is used to download specified certificates to a device according to the desired key
exchange algorithm. For RSA key exchange, a user must download an RSA type certificate and
for DHS_DSS must use the DSA certificate for key exchange.
Format
download ssl certificate <ipaddr> certfilename <path_filename 64> {keyfilename
<path_filename 64>}
Parameters
<ipaddr> - Enter the TFTP server IP address.
certfilename - Specifies the desired certificate file name and the certificate file path in respect to
the TFTP server root path. Input characters with a maximum of 64 octets.
<path_filename 64> - Enter the desired certificate file name and the certificate file path in
respect to the TFTP server root path. Input characters with a maximum of 64 octets. The
certificate file name can be up to 64 characters long.
keyfilename - (Optional) Specifies the private key file name which accompanies the certificate
and the private key file path in respect to the TFTP server root path. Input characters with a
maximum of 64 octets.
<path_filename 64> - Enter the private key file name which accompanies the certificate and
the private key file path in respect to the TFTP server root path. Input characters with a
maximum of 64 octets. The private key file name can be up to 64 characters long.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.