webserver certificate generate
Generates a REST API Server certificate.
User Privileges
Users with the following privileges can perform this command:
>Admin
Syntax
webserver certificate generate -keytype <key_type> [-keysize <size>] [-curve <curve_name>] [-restart] [-force]
Argument(s) | Shortcut | Description |
---|---|---|
-keytype <key_type> | -keyt |
Key type. Valid values: ecc,rsa |
-keysize <size> | -keys |
RSA key size (default to 2048). Valid values: 2048,3072,4096 |
-curve <curve_name> | -c |
Elliptic Curve name (default to secp384r1). |
-force | -f |
Force the action without prompting. |
-restart | -r |
Restart the REST API service if parameter is specified. Otherwise, the administrator must restart the REST API service via other means (i.e., “service start webserver”). |
Example
lunash:>webserver certificate generate -keytype rsa -restart WARNING: This operation will generate/regenerate the REST API Server certificate !!! Type 'proceed' to continue, or 'quit' to quit now. > proceed Proceeding... Restarting REST API service... Redirecting to /bin/systemctl restart webserver.service REST API Server Certificate: Data: Version: 3 (0x2) Serial Number: d6:93:f0:66:1c:04:9f:34 Signature Algorithm: sha384WithRSAEncryption Issuer: C=CA, ST=Ontario, L=Ottawa, O=Gemalto, CN=local_host Validity Not Before: Mar 1 20:22:56 2017 GMT Not After : Feb 27 20:22:56 2027 GMT Subject: C=CA, ST=Ontario, L=Ottawa, O=Gemalto, CN=local_host Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cf:f2:56:9b:22:24:f2:4e:bb:ab:8b:d3:38:42: 24:65:0d:98:13:de:62:92:8f:5b:a5:6b:a5:ea:15: aa:08:f7:ae:c4:62:58:cf:54:3c:0b:16:fe:ba:71: 93:ac:a9:71:14:f0:a7:41:94:0f:34:80:cc:fd:6d: d2:ae:2b:8d:a5:ef:f2:25:43:d6:5e:08:59:b7:1b: a1:7a:dc:96:08:c1:ee:c0:35:41:1e:90:7f:16:d1: 32:d0:c6:4c:6b:df:3c:b3:48:2d:14:5f:fa:cc:b4: cf:11:27:3a:74:14:80:17:eb:87:c8:f6:41:35:91: c6:c5:60:67:87:d7:58:ba:b0:7b:97:b8:a9:08:de: 67:c9:2d:cf:ac:08:3e:a1:c1:31:23:b3:cd:96:7b: af:45:4e:fd:e6:80:61:28:52:4e:27:27:9c:d6:01: 19:ef:74:6e:15:7d:51:d4:62:be:38:a8:8f:04:7e: 82:18:7c:75:a5:6a:4c:10:3e:d8:ec:86:03:52:fe: f7:15:0a:45:55:f4:ae:be:c7:88:e5:6b:09:be:18: 27:96:54:c2:ad:30:8e:43:d9:0e:f4:4a:00:06:28: fb:08:cd:df:af:31:e3:1d:58:95:f8:51:90:ee:5a: 48:3a:21:83:f1:53:59:a8:8f:7c:cf:e8:0f:b2:09: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:20:E0:21:B8:19:7F:11:0B:57:7C:3E:0D:CA:70:63:6D:97:E4:CD X509v3 Authority Key Identifier: keyid:C1:20:E0:21:B8:19:7F:11:0B:57:7C:3E:0D:CA:70:63:6D:97:E4:CD X509v3 Basic Constraints: CA:TRUE Signature Algorithm: sha384WithRSAEncryption 6c:b6:04:92:f9:52:6f:ae:1f:ef:b8:fa:f9:40:16:97:28:10: f2:13:64:af:cb:67:63:4b:81:42:cb:00:cb:5a:9b:39:2d:88: 30:c1:75:bc:90:69:33:67:51:1c:05:c0:b1:e2:88:47:8e:ad: 48:28:eb:d0:24:e0:48:46:b0:5a:97:e8:c8:0d:39:b9:13:e3: 78:5a:c2:f6:66:cf:25:97:8e:0b:47:70:41:7e:e1:46:f5:4a: 25:9a:b0:3f:43:2b:4c:ed:64:b0:2d:24:13:17:2f:bd:09:11: c0:15:f2:da:aa:7e:9d:27:2e:b5:cd:7d:0d:b5:80:23:14:3a: 8c:fc:e2:76:92:d1:87:1b:9e:a5:c6:ef:b2:a0:af:f3:15:cc: 41:84:5c:d1:fc:d3:3f:9a:c1:65:b0:bf:3c:be:e9:07:f4:25: 45:ff:f0:65:a7:a6:38:d8:f8:13:55:a6:ee:b1:9f:4a:31:c1: d5:e2:b7:a2:f1:8d:07:72:cc:39:d1:4f:34:a7:df:1d:bc:4e: d0:94:c4:f2:f9:a0:53:c4:fb:fe:03:4a:01:13:8b:bd:c0:ef: ed:1b:90:c8:ec:e9:26:ee:90:9f:94:f2:9c:62:8e:09:55:27: 26:fb:00:02:3b:6b:5b:53:8a:b4:9c:25:7c:33:78:ec:40:30: 02:09:cf:20 Command Result : 0 (Success)