Allied Telesis AT-S95 CLI - Manual (Page 321)

Web Server Commands
Page 309
User Guidelines
Use this command to enter an external certificate (signed by Certification Authority) to the device. To end the
session, enter an empty line.
The imported certificate must be based on a certificate request created by the crypto certificate request
Privileged EXEC mode command.
If the public key found in the certificate does not match the device's SSL RSA key, the command fails.
This command is not saved in the device configuration; however, the certificate imported by this command is
saved in the private configuration (which is never displayed to the user or backed up to another device).
Example
The following example imports a certificate signed by Certification Authority for HTTPS.
ip https certificate
The ip https certificate Global Configuration mode command configures the active certificate for HTTPS. Use the
no form of this command to return to the default configuration.
Syntax
ip https certificate number
no ip https certificate
Parameters
•
number — Specifies the certificate number. (Range: 1 - 2)
Default Configuration
Certificate number 1.
Console(config)# crypto certificate 1 import
-----BEGIN CERTIFICATE-----
dHmUgUm9vdCBDZXJ0aWZpZXIwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAp4HS
nnH/xQSGA2ffkRBwU2XIxb7n8VPsTm1xyJ1t11a1GaqchfMqqe0kmfhcoHSWr
yf1FpD0MWOTgDAwIDAQABo4IBojCCAZ4wEwYJKwYBBAGCNxQCBAYeBABDAEEw
CwR0PBAQDAgFGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAf4MT9BRD47
ZvKBAEL9Ggp+6MIIBNgYDVR0fBIIBLTCCASkwgdKggc+ggcyGgclsZGFwOi8v
L0VByb3h5JTIwU29mdHdhcmUlMjBSb290JTIwQ2VydGlmaWVyLENOPXNlcnZl
-----END CERTIFICATE-----
Certificate imported successfully.
Issued to: router.gm.com
Issued by: www.verisign.com
Valid from: 8/9/2003 to 8/9/2004
Subject: CN= router.gm.com, 0= General Motors, C= US
Finger print: DC789788 DC88A988 127897BC BB789788