Chapter 2 Setting Up XSCF 2-117
3. To enable the https, the XSCF reset is required. Use the rebootxscf(8)
command to reset the XSCF.
â– After the XSCF reset, the XSCF session is disconnected. Please log in again to the
XSCF.
Importing a Web Server Certificate by Using the External CA or CA in
Intranet
â– Command operation
1. Use the sethttps(8) command to create a web server private key.
2. Use the sethttps(8) command to create the CSR specifying the distinguished
name (DN). (See the DN description in "External authentication" in
TABLE 2-15.)
3. Use the sethttps(8) command to display the CSR. Copy the displayed CSR
(BEGIN to END) and save it in the text file.
XSCF> rebootxscf
The XSCF will be reset. Continue? [y|n] :y
XSCF> sethttps -c genserverkey
Server key already exists. Do you still wish to update? [y|n] :y
Enter passphrase: xxxxxxxx
Verifying - Enter passphrase: xxxxxxxx
<Example> Specify the DN (JP, Kanagawa, Kawasaki, Example,
Development, scf-host, abc@example.com)
XSCF> sethttps -c gencsr JP Kanagawa Kawasaki Example Development
scf_host abc@example.com
XSCF> showhttps
HTTPS status: disabled
Server key: installed in Jul 11 06:33:25 UTC 2006
CA key: installed in Jul 11 06:33:21 UTC 2006
CA cert: installed in Jul 11 06:33:21 UTC 2006
CSR:
-----BEGIN CERTIFICATE REQUEST-----
MIIByzCCATQCAQAwgYoxCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER
MA8GA1UEBxMIS2F3YXNha2kxEDAOBgNVBAoTB0ZVSklUU1UxDDAKBgNVBAsTA0VQ
:
uni/n3g2/F5Ftnjg+M4HtfzT6VwEhG01FGP4IImqKg==
-----END CERTIFICATE REQUEST-----