7,494
edits
Changes
Template:Networking rutos manual administration (view source)
Revision as of 11:08, 18 April 2024
, 18 Aprilno edit summary
====Generation Parameters====
====Generation Parameters====
----
----
Generating each type of file (excluding 'Simple') requires setting some parameters. This section provides an overview for parameters used in TLS certificate generation.
Generating each type of file requires setting some parameters. This section provides an overview for parameters used in Simple and TLS certificate generation.
----
----
<b>Core parameters</b> or simply parameters that apply to each file type are the size and common name of the generated file(s).
<b>Simple file parameters</b>
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_simple_parameters.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Hosts</td>
<td>string; default: <b>none</b></td>
<td>Appends hostnames to certificates.</td>
</tr>
<tr>
<td>IP addresses</td>
<td>IPv4 address; default: <b>none</b></td>
<td>Appends IPv4 addresses to certificates.</td>
</tr>
</table>
<b>TLS parameters</b> or simply parameters that apply to each (CA, Server, Client, DH) file type are the size and common name of the generated file(s).
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_core_parameters_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_core_parameters_v1.png|border|class=tlt-border]]
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_certificate_signing_v2.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_certificate_signing_v3.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<td>off {{!}} on; default: <b>off</b></td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>
<td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>
</tr>
<tr>
<td>Hosts</td>
<td>string; default: <b>none</b></td>
<td>Appends hostnames to certificates.</td>
</tr>
<tr>
<td>IP addresses</td>
<td>IPv4 address; default: <b>none</b></td>
<td>Appends IPv4 addresses to certificates.</td>
</tr>
</tr>
<tr>
<tr>
