Lantronix XPort Pro XPort Pro - User Guide - Page 94

SSL Utilities, OpenSSL, Steel Belted RADIUS, Free RADIUS

Get Lantronix XPort Pro PDF manuals and user guides View all Lantronix XPort Pro manuals
Add to My Manuals
Save this manual to your list of manuals

Page 94 highlights

10: Security Settings SSL Utilities Several utilities exist to convert between the formats. OpenSSL Open source set of SSL related command line utilities. It can act as server or client. It can generate or sign certificate requests. It can convert all kinds of formats. Executables are available for Linux and Windows. To generate a self-signed RSA certificate/key combo use the following commands in the order shown: openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout mp_key.pem -out mp_cert.pem Note: Signing other certificate requests is also possible with OpenSSL. See www.openssl.org or www.madboa.com/geek/openssl for more information. Steel Belted RADIUS Commercial RADIUS server by Juniper Networks that provides a GUI administration interface. It also provides a certificate request and self-signed certificate generator. The self-signed certificate has extension .sbrpvk and is in the PKCS12 format. OpenSSL can convert this into a PEM format certificate and key by using the following commands in the order shown: openssl pkcs12 -in sbr_certkey.sbrpvk -nodes -out sbr_certkey.pem The sbr_certkey.pem file contains both certificate and key. If loading the SBR certificate into XPort Pro as an authority, you will need to edit it. 1. Open the file in any plain text editor. 2. Delete all info before the following: "----- BEGIN CERTIFICATE-----" 3. Delete all info after the following: "----- END CERTIFICATE-----" 4. Save as sbr_cert.pem. SBR accepts trusted-root certificates in the DER format. 5. Again, OpenSSL can convert any format into DER by using the following commands in the order shown: openssl x509 -inform pem -in mp_cert.pem -outform der -out mp_cert.der Note: With SBR, when the identity information includes special characters such as dashes and periods, SBR changes the format it uses to store these strings and becomes incompatible with the current XPort Pro release. We will add support for this and other formats in future releases. Free RADIUS-Linux open-source RADIUS server. It is versatile, but complicated to configure. Free RADIUS Free RADIUS is a Linux open-source RADIUS server. It is versatile, but complicated to configure. XPort Pro User Guide 94

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
10: Security Settings
XPort Pro User Guide
94
SSL Utilities
Several utilities exist to convert between the formats.
OpenSSL
Open source set of SSL related command line utilities. It can act as server or client. It can
generate or sign certificate requests. It can convert all kinds of formats. Executables are available
for Linux and Windows. To generate a self-signed RSA certificate/key combo use the following
commands in the order shown:
openssl req –x509 –nodes –days 365 –newkey rsa:1024 –keyout
mp_key.pem –out mp_cert.pem
Note:
Signing other certificate requests is also possible with OpenSSL. See
www.openssl.org
or
www.madboa.com/geek/openssl
for more information.
Steel Belted RADIUS
Commercial RADIUS server by Juniper Networks that provides a GUI administration interface. It
also provides a certificate request and self-signed certificate generator. The self-signed certificate
has extension .sbrpvk and is in the PKCS12 format. OpenSSL can convert this into a PEM format
certificate and key by using the following commands in the order shown:
openssl pkcs12 -in sbr_certkey.sbrpvk -nodes -out sbr_certkey.pem
The sbr_certkey.pem file contains both certificate and key. If
loading the SBR certificate into XPort
Pro as an authority, you will need to edit it.
1.
Open the file in any plain text editor.
2.
Delete all info before the following:
“----- BEGIN CERTIFICATE-----“
3.
Delete all info after the following:
“----- END CERTIFICATE-----“
4.
Save as sbr_cert.pem. SBR accepts trusted-root certificates in the DER format.
5.
Again, OpenSSL can convert any format into DER by using the following commands in the
order shown:
openssl x509 -inform pem -in mp_cert.pem -outform der -out
mp_cert.der
Note:
With SBR, when the identity information includes special characters such as
dashes and periods, SBR changes the format it uses to store these strings and becomes
incompatible with the current XPort Pro release. We will add support for this and other
formats in future releases.
Free RADIUS—Linux open-source RADIUS server. It is
versatile, but complicated to configure.
Free RADIUS
Free RADIUS is a Linux open-source RADIUS server. It is versatile, but complicated to configure.