Configuration Mode Commands : System administration commands : logging ssl cert
  
logging ssl cert
Mange the syslog UI certificate.
Syntax
[no] logging ssl cert {crl-validation enable | generate [country <country> | email <email-addr> | key-size {4096|3072|2048} | locality <locality> | org <org> | org-unit <org-unit> | state <state> | valid-days <valid-days>] | generate-csr [common-name <common-name> | country <country> | email <email> | locality <locality> | org <org> | org-unit <org-unit> | state <state>] | import-cert <cert-data> | import-cert-key <cert-key-data> | self-signed-import disable}
Parameters
crl-validation enable
Enable or disable Certificate Validation List (CRL) distribution point access.
generate
Generate a new SSL certificate for the syslog server. Optional fields to specify are:
country <country>— The two letter country code
email <email>— A contact email address for the certificate.
key-size <key-size>— Specify a key size. The allowable sizes, in bits, are 4096, 3072, or 2048.
locality <locality>— Specify a locality.
org <organization>— Specify an organization.
org-unit <organization unit>— Specify an organizational unit.
state <state>— Specify the full state name, no abbreviations.
valid-days <valid-days>— Specify the number of days for the certificate to be valid.
generate-csr
Generate a certificate signing request with a current private key. Optional fields:
common-name <common-name>— Specify a common name for the CSR, usually the hostname.
country <country>— The two letter country code.
email <email>— A contact email address for the CSR.
locality <locality>— Specify a locality.
org <organization>— Specify an organization.
org-unit <organization unit>— Specify an organizational unit.
state <state>— Specify the full state name, no abbreviations.
import-cert <cert-data>
Import a certificate, enter the certificate data in PEM format.
import-cert-key <cert-key-data>
Import a certificate and key together, enter the certificate and private key data in PEM format.
self-signed-import
Enable or disable the importation of self-signed certificates.
Usage
The no command option disables CRL distribution point access and/or the importation of self-signed certificates.
Example
amnesiac (config) # logging ssl cert generate-csr
-----BEGIN CERTIFICATE REQUEST-----
BAgMAkNBMQswCQYDVQQGEwJVUzEfMB0GCSqGSIb3DQEJARYQYWRtaW5Ab2FrLXZ
BAgMAkNBMQswCQYDVQQGEwJVUzEfMB0GCSqGSIb3DQEJARYQYWRtaW5Ab2FrLXZ
BAgMAkNBMQswCQYDVQQGEwJVUzEfMB0GCSqGSIb3DQEJARYQYWRtaW5Ab2FrLXZ
lfXoF72U39c=THIS*IS*NOT*A*REAL*CSRkjkfljkjflkejfgkdjfkdjfdkjfdkj
-----END CERTIFICATE REQUEST-----
Product
SCC, Interceptor, Client Accelerator, SteelHead, SteelHead-v, SteelHead-c