Signing csrs – Nortel Networks NN46120-104 User Manual

Page 124

124

Certificates and Client Authentication

Signing CSRs

This feature is primarily used when you have configured the virtual SSL
server to perform end to end encryption, and you want to sign a CSR
(Certificate Signing Request) generated on a backend web server by using
a CA certificate on the VPN Gateway.

Step

Action

Specify the CA certificate that you want to use for signing

the CSR.

>> Main# cfg/cert 1

>> Certificate 1# sign

Paste the CSR.

Open the CSR file in a text editor and copy the entire contents,
including the text "-----BEGIN CERTIFICATE REQUEST-----"
and "-----END CERTIFICATE REQUEST-----". Having pasted the
CSR, press ENTER to create a new line and type three periods
(...). Finally press ENTER once again.

Apply the changes.

In the preceding example, the newly signed certificate is saved
as certificate number 3. Use the

export

command to export the

signed certificate to a file. The signed CSR can then be installed
on the backend web server as a server certificate.

Specify the certificate you used for signing the CSR is

specified as a CA certificate on the virtual SSL server.

Nortel VPN Gateway

User Guide

NN46120-104

02.01

Standard

14 April 2008