Cisco 11503 - CSS Content Services Switch Configuration Manual page 75

Chapter 3 Configuring SSL Certificates and Keys
•
•
•
•
An imported file can contain certificates, RSA or DSA key pairs, or
Note
Diffie-Hellman parameters. You must distinguish whether the files contain
certificates, privates keys, or Diffie-Hellman parameters by associating the
specific contents to a filename. See the
Files with Names"
For example, to import the rsacert.pem certificate from a remote server to the
CSS, enter:
# copy ssl sftp ssl_record import rsacert.pem PEM "passwd123"
Connecting
Completed successfully
For example, to import the rsakey.pem certificate from a remote server to the CSS,
enter:
# copy ssl sftp ssl_record import rsakey.pem PEM "passwd123"
Connecting
Completed successfully
OL-5655-01
"password" - The password used to DES (Data Encryption Standard) encode
the imported certificate or private key. Encoding the imported file prevents
unauthorized access to the certificate or private key on the CSS. Enter the
password as a quoted string with a maximum of 35 characters. The password
appears in the CSS running configuration as a DES-encoded string.
"passphrase" - (Optional for PEM files) The passphrase used to encrypt the
certificate or key being imported into the CSS. Enter the passphrase as a
quoted text string.
You must enter a passphrase for a PKCS12 file (.pfx). The CSS uses
Note
the passphrase to decrypt the file.
export - Export the file to the remote server.
filename2 - The name you want to assign to the file on the server. Include the
full path to the file. Enter an unquoted text string with no spaces and a
maximum length of 32 characters.
section.
Cisco Content Services Switch SSL Configuration Guide
Importing or Exporting Certificates and Private Keys
"Associating Certificate and Private Key
3-15