ssl-ecdsaKey¶
The following operations can be performed on "ssl-ecdsaKey":
create ssl ecdsaKey¶
Generates an ECDSA key.
Synopsis¶
create ssl ecdsaKey <keyFile> -curve ( P_256 | P_384 ) [-keyform ( DER | PEM )] [-des | -des3 | -aes256] {-password } [-pkcs8]
Arguments¶
keyFile
Name for and, optionally, path to the ECDSA key file. /nsconfig/ssl/ is the default path. Maximum value: 63
curve
Curve id to generate ECDSA key. Only P_256 and P_384 are supported
Possible values: P_256, P_384 Default value: FIPSEXP_F4
keyform
Format in which the ECDSA key file is stored on the appliance.
Possible values: DER, PEM Default value: PEM
des
Encrypt the generated ECDSA key by using the DES algorithm. On the command line, you are prompted to enter the pass phrase (password) that is used to encrypt the key.
des3
Encrypt the generated ECDSA key by using the Triple-DES algorithm. On the command line, you are prompted to enter the pass phrase (password) that is used to encrypt the key.
aes256
Encrypt the generated ECDSA key by using the AES algorithm.
password
Pass phrase to use for encryption if DES or DES3 option is selected. Maximum value: 31
pkcs8
Create the private key in PKCS#8 format.
Example¶
create ssl ecdsakey /nsconfig/ssl/ecdsa256.key 1024 -curve P_256