E.1 Creating a private key
The following describes the command provided by JP1/AJS3 - Web Console to create a private key. The provided command varies depending on the version of JP1/AJS3 - Web Console.
- Format
-
For JP1/AJS3 - Web Console version 11-10-02 or earlier, or version 11-00-10 or earlier.
keygen -rand file-name-to-be-used-for-random-number-generation -out key-file [-bits bit-length-of-the-private-key]
The path to be specified for the JP1/AJS3-Web-Console-installation-folder\uCPSB\httpsd\sbin\keygen for Windows, and /opt/jp1ajs3web/uCPSB/httpsd/sbin/keygen for Linux.
For a version other than those listed above:
- In Windows:
openssl.bat genrsa -rand name-of-the-file-to-be-used-for-random-number-generation -out path-to-private-key-file bit-length-of-private-key [bit-length-of-the-private-key]
The path of the openssl.bat is JP1/AJS3-Web-Console-installation-folder\uCPSB\httpsd\sbin\openssl.bat.
For details about execution permission required for the openssl.bat, see the official website of OpenSSL.
- In Linux:
openssl.sh genrsa -rand name-of-the-file-to-be-used-for-random-number-generation -out path-to-private-key-file it-length-of-private-key [bit-length-of-the-private-key]
The path of the openssl.sh is opt/jp1ajs3web/uCPSB/httpsd/sbin/openssl.sh.
For details about execution permission required for the openssl.sh, see the official website of OpenSSL.
- Parameters
-
- -rand file-name-to-be-used-for-random-number-generation
-
Specify any file to be used for random number generation. You must specify an appropriate file whose size is large enough for the random number generation (for example, C:\WINNT\NOTEPAD.EXE).
- -out key-file
-
Specify the file to which the private key is output.
- -bits bit-length-of-the-private-key
-
For the keygen command, specify the bit length of the private key to be created. Specifiable bit lengths are as follows:
-
512
-
1024
-
2048
-
4096
If this argument is omitted, specification of 1024 is assumed.
-
- bit-length-of-the-private-key
-
For the openssl.bat genrsa command or the openssl.sh genrsa command, specify the bit length of the private key to be created. Specifiable bit lengths are as follows:
-
512
-
1024
-
2048
-
4096
If this argument is omitted, specification of 2048 is assumed.
-
- Usage example 1
-
To create a private key (httpsdkey.pem) by using the keygen command:
keygen -rand C:\WINNT\NOTEPAD.EXE -out httpsdkey.pem -bits 2048
- Usage example 2
-
To create a private key (httpsdkey.pem) by using the openssl.bat genrsa command:
openssl.bat genrsa -rand C:\WINNT\NOTEPAD.EXE -out httpsdkey.pem 2048