certificates <target> <action> <service_name>
<target> :
- local
<action> :
- print: provides a given certificate detailed information.
- revoke: revokes a given certificate.
- export: returns a given certificate contents.
- import: upload a given certificate for the server CSR. This will replace the
CSR with the certificate given.
- csr: get the server CSR contents. This will create the CSR if not already
existing.
<service_name>: mqtt/syslog/webserver
Examples of usage
From a linux host:
printover SSH:sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates local print $SERVICE_NAME
revoke over SSH:sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates localrevoke $SERVICE_NAME
exportover SSH:sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates localexport $SERVICE_NAME
importover SSH:cat$FILE | sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates localimport
$SERVICE_NAME
csr over SSH:sshpass -p $PASSWORD ssh $USER@$CARD_ADDRESS certificates localcsr mqtt
From a Windows host:(plink tools from putty is required)
print over SSH:plink $USER@$CARD_ADDRESS -pw$PASSWORD -batch certificates local print $SERVICE_NAME
revoke over SSH:plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates localrevoke $SERVICE_NAME
export over SSH:plink $USER@$CARD_ADDRESS -pw$PASSWORD -batch certificates localexport $SERVICE_NAME
import over SSH:type $FILE | plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates localimport
$SERVICE_NAME
csrover SSH:plink $USER@$CARD_ADDRESS -pw $PASSWORD -batch certificates localcsr mqtt
Where:
$USER is user name (the user shall have administrator profile)
$PASSWORD is the user password
$PASSPHRASE is any passphrase to encrypt/decrypt sensible data.
$CARD_ADDRESS is IP or hostname of the card
$FILE is a certificate file
$SERVICE_NAME is the name one of the following services : mqtt/ syslog / webserver.