Chapter 13 Certificates
NWA/WAC Series CLI Reference Guide
76
13.5 Certificates Commands Examples
The following example creates a self-signed X.509 certificate with IP address 10.0.0.58 as the
common name. It uses the RSA key type with a 512 bit key. Then it displays the list of local
certificates. Finally it deletes the pkcs12request certification request.
ca generate x509 name certificate_name cn-type {ip
cn cn_address|fqdn cn cn_domain_name|mail cn
cn_email} [ou organizational_unit] [o organization]
[c country] key-type {rsa|dsa} key-len key_length
Generates a self-signed x509 certificate.
ca rename category {local|remote} old_name new_name Renames a local (my certificates) or remote (trusted
certificates) certificate.
ca validation remote_certificate Enters the sub command mode for validation of certificates
signed by the specified remote (trusted) certificates.
no ca category {local|remote} certificate_name Deletes the specified local (my certificates) or remote
(trusted certificates) certificate.
no ca validation name Removes the validation configuration for the specified
remote (trusted) certificate.
show ca category {local|remote} name
certificate_name certpath
Displays the certification path of the specified local (my
certificates) or remote (trusted certificates) certificate.
show ca category {local|remote} [name
certificate_name format {text|pem}]
Displays a summary of the certificates in the specified
category (local for my certificates or remote for trusted
certificates) or the details of a specified certificate.
show ca validation name name Displays the validation configuration for the specified
remote (trusted) certificate.
show ca spaceusage Displays the storage space in use by certificates.
Table 42 ca Commands Summary (continued)
COMMAND DESCRIPTION
Router# configure terminal
Router(config)# ca generate x509 name test_x509 cn-type ip cn 10.0.0.58 key-type rsa
key-len 512
Router(config)# show ca category local
certificate: default
type: SELF
subject: CN=nwa3160-n_00134905820A
issuer: CN=nwa3160-n_00134905820A
status: EXPIRED
ID: nwa3160-n_00134905820A
type: EMAIL
valid from: 1970-01-01 02:09:16 GMT
valid to: 1989-12-27 02:09:16 GMT
Router(config)# no ca category local pkcs12request
To Next Page
Loading...
