Tripp Lite B093-004-2E4U-V Owner's Manual

Loading ...

3. System Conﬁguration

Prepare a USB Drive and Create the X.509 Certiﬁcate and Private Key

• Generate the CA certiﬁcate so the client and server Certiﬁcate Signing Requests (CSRs) can be signed.

# cp /etc/ssl/openssl.cnf .

# mkdir -p exampleCA/newcerts

# echo 00 > exampleCA/serial

# echo 00 > exampleCA/crlnumber

# touch exampleCA/index.txt

# openssl genrsa -out ca.key 8192

# openssl req -new -x509 -days 3650 -key ca.key -out demoCA/cacert.pem \

-subj /CN=ExampleCA

# cp demoCA/cacert.pem ca-bundle.crt

Note: This procedure generates a certiﬁcate called ExampleCA, but any allowed certiﬁcate name can be used. Also, this procedure uses

openssl ca. If your organization has an enterprise-wide, secure CA generation process, that should be used instead.

• Generate the server certiﬁcate.

# openssl genrsa -out server.key 4096

# openssl req -new -key server.key -out server.csr -subj /CN=demo.example.com

# openssl ca -days 365 -in server.csr -out server.crt \

-keyﬁle ca.key -policy policy_anything -batch -notext

Note: The hostname or IP address must be the same string as will be used in the serving URL. In the example above, the hostname is

demo.example.com.

• Generate the client certiﬁcate.

# openssl genrsa -out client.key 4096

# openssl req -new -key client.key -out client.csr -subj /CN=ExampleClient

# openssl ca -days 365 -in client.csr -out client.crt \

-keyﬁle ca.key -policy policy_anything -batch -notext

# cat client.key client.crt > client.pem

• Format a USB ﬂash drive as a single FAT32 volume.

• Move the client.pem and ca-bundle.crt ﬁles onto the ﬂash drive’s root directory.

Loading ...

Tripp Lite B093-004-2E4U-V 4-Port Console Server with 4G LTE Cellular Gateway, Dual GbE NIC, 4Gb Flash and Dual SIM