2-66 SPARC Enterprise Mx000 Servers XSCF User’s Guide • August 2009
Creating a Web Server Certificate by Constructing the Self CA
â– Command operation
1. Use the sethttps(8) command to create a self-signed web server certificate by
specifying the DN.
2. Use the showhttps(8) command to confirm the generated web server certificate.
3. Use the sethttps(8) command to enable https.
4. Use the rebootxscf(8) command to reset the XSCF.
â– After the XSCF reset, the XSCF session is disconnected. Please log in again to the
XSCF.
<Example> Specify the DN (JP, Kanagawa, Kawasaki, Example,
Development, scf-host, abc@example.com)
XSCF> sethttps -c selfsign JP Kanagawa Kawasaki Example Development
scf-host abc@example.com
CA key and CA cert already exist. Do you still wish to update? [y|n]
:y
Enter passphrase: xxxxxxxx
Verifying - Enter passphrase: xxxxxxxx
XSCF> showhttps
HTTPS status: disabled
Server key: installed in Jul 11 06:33:25 UTC 2006
CA key: installed in Jul 11 06:33:21 UTC 2006
CA cert: installed in Jul 11 06:33:21 UTC 2006
CSR:
-----BEGIN CERTIFICATE REQUEST-----
MIIByzCCATQCAQAwgYoxCzAJBgNVBAYTAkpQMREwDwYDVQQIEwhLYW5hZ2F3YTER
MA8GA1UEBxMIS2F3YXNha2kxEDAOBgNVBAoTB0ZVSklUU1UxDDAKBgNVBAsTA0VQ
:
uni/n3g2/F5Ftnjg+M4HtfzT6VwEhG01FGP4IImqKg==
-----END CERTIFICATE REQUEST-----
XSCF> sethttps -c enable
XSCF> rebootxscf
The XSCF will be reset. Continue? [y|n] :y