Views:

Create a private key and self-signed certificate

  1. Log on to the IWSVA server using the Command Line Interface (CLI).
  2. Run the following command:

    #openssl req -x509 -days 1289 -newkey rsa:1024 -keyout /tmp/root_key.pem -out /tmp/root_req.pem

     This will create the following files:

    • /tmp/root_key.pem – contains the private key encrypted with the password you specified
    • /tmp/root_req.pem – contains the self-signed certificate
  3. Copy the files from the IWSVA server to your local machine. You may use winscp.
  4. Open the IWSVA management console.
  5. Go to HTTP > HTTPS Decryption > Settings > Certificate Authority.

    Certificate Authority

    Click image to enlarge

  6. Under Import CA section, set the following:

    • In the Certificate field, click Browse and and locate the root_req.pem file.
    • In the Private Key field, click Browse and locate the root_key.pem file.
    • In the Passphrase and Confirm passphrase fields, enter the password that you specified in Step 2.
    • Click Import CA > OK.

    Import CA

    Click image to enlarge

Verify the validity

  1. Log on to the IWSVA server using the Command Line Interface (CLI).
  2. Run the following command:

    # openssl x509 -text -inform PEM -in /tmp/root_req.pem