config certificate setting
Certificate setting.
config certificate setting
Description: Certificate setting.
set check-ca-cert [enable|disable]
set subject-match [substring|value]
set cn-match [substring|value]
set strict-crl-check [enable|disable]
set certname-rsa1024 {string}
set certname-rsa2048 {string}
set certname-dsa1024 {string}
set certname-dsa2048 {string}
set certname-ecdsa256 {string}
set certname-ecdsa384 {string}
end
config certificate setting
|
Parameter |
Description |
Type |
Size |
|||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
check-ca-cert |
Enable to check the CA certificate and fail authentication if certificate is not found. |
option |
- |
|||||||
|
|
|
|||||||||
|
subject-match |
When searching for a matching certificate, control how to find matches in the certificate subject name. |
option |
- |
|||||||
|
|
|
|||||||||
|
cn-match |
When searching for a matching certificate, control how to find matches in the cn attribute of the certificate subject name. |
option |
- |
|||||||
|
|
|
|||||||||
|
strict-crl-check |
Enable/disable strict mode CRL checking. |
option |
- |
|||||||
|
|
|
|||||||||
|
certname-rsa1024 |
1024 bit RSA key certificate for re-signing server certificates for SSL inspection. |
string |
Maximum length: 35 |
|||||||
|
certname-rsa2048 |
2048 bit RSA key certificate for re-signing server certificates for SSL inspection. |
string |
Maximum length: 35 |
|||||||
|
certname-dsa1024 |
1024 bit DSA key certificate for re-signing server certificates for SSL inspection. |
string |
Maximum length: 35 |
|||||||
|
certname-dsa2048 |
2048 bit DSA key certificate for re-signing server certificates for SSL inspection. |
string |
Maximum length: 35 |
|||||||
|
certname-ecdsa256 |
256 bit ECDSA key certificate for re-signing server certificates for SSL inspection. |
string |
Maximum length: 35 |
|||||||
|
certname-ecdsa384 |
384 bit ECDSA key certificate for re-signing server certificates for SSL inspection. |
string |
Maximum length: 35 |
|||||||