Hvrsslgen

From HVR
Jump to: navigation, search

Name

hvrsslgen – Generate a private key and public certificate pair.

Synopsis

hvrsslgen [-opts] basename subj

Description

Command hvrsslgen generates a private key and public certificate pair used for setting up a secure HVR connection to a remote HVR location.

The command hvrsslgen generates two files named after its first argument: a file named basename.priv_key and a file containing the corresponding public certificate named basename.pub_cert. The second argument subj is written as plain text into the subject field of the X509 public certificate file and serves for reference purposes only. Both files are needed on the remote machine, only the public certificate file must be copied to the hub machine.

Options

Parameter Description
–a bits Generate an asymmetric (RSA) key pair with length bits. The default is 2048.
–d dir Generate files in directory dir instead of current directory.
–e enc_alg Encrypt the private key with encryption algorithm enc_alg. The default is 'aes-256-cbc'.
–h hash_alg Sign the certificate using hash algorithm hash_alg. The default is 'sha256'.

Example

$ hvrsslgen -a2048 -eaes-256-cfb -hsha512 MyCertificate "Certificate for Cloud"
hvrsslgen: Generating SSL key pair...
hvrsslgen: Generating SSL key pair... completed.
hvrsslgen: Private key written to 'MyCertificate.priv_key'.
hvrsslgen: Public Certificate written to 'MyCertificate.pub_cert'.
hvrsslgen: Certificate subject: 'HVR Certificate for Cloud'
hvrsslgen: Certificate contains 2048 bit RSA Public Key.
hvrsslgen: Certificate valid from Nov  4 10:11:57 2015 GMT
hvrsslgen: Certificate valid until Oct 30 10:11:57 2035 GMT
hvrsslgen: Finished. (elapsed=1.85s)