
Administering Security Certificates for HTTPS and SSH on the OnSite
530
AlterPath OnSite Administrator’s and User’s Guide
The following screen example shows the command used to obtain the
client information and the resulting output from a signed certificate that
was generated from a local CA at Cyclades.
2. On the OnSite, the administrator must make the following change to the
output of the Step 1.
a. Replace the string “subject=” with “
x509v3-sign-rsa
disTinguishednamE:”
.
b. Append the edited output to the /etc/ssh/authorized_keys
file.
The following screen example shows the tail of the /etc/ssh/
authorized_keys file after the edited output from Step 1 is
appended.
3. On the OnSite, the administrator must do the following:
a. Open the /etc/ssh/sshd_config file for editing.
# openssl x509 -noout -subject -in \
/etc/ssh/ca/ca-bundle.crt
subject= /C=US/ST=CA/L=Fremont/O=Cyclades Corporation/OU=R&D/
CN=www.cyclades.com
x509v3-sign-rsa disTinguishednamE: /C=US/ST=CA/L=Fremont/
O=Cyclades Corporation/OU=R&D/CN=www.cyclades.com
Comentários a estes Manuais