P a g e
|
83
GWN7000 User Manual
Version 1.0.6.28
Key Length
Choose the key length for generating the client certificate.
Following values are available:
•
1024
: 1024-bit keys are no longer sufficient to protect
against attacks. Not recommended.
•
2048
: 2048-bit keys are a good minimum. Recommended.
•
4096
: 4096-bit keys are accepted by nearly all RSA
systems. Using 4096-bit keys will dramatically increase
generation time, TLS handshake delays, and CPU usage
for TLS operations.
Digest Algorithm
Choose the digest algorithm:
•
SHA1:
This digest algorithm provides a 160-bit fingerprint
output based on arbitrary length input.
•
SHA-256:
This digest algorithm generates an almost-
unique, fixed size 256-bit (32-byte) hash. Hash is a one-way
function – it cannot be decrypted back
Lifetime (days)
Enter the validity date for the client certificate in days.
Example: “120”.
Country Code
Select a country code from the dropdown list.
Example: “MA”.
State or Province
Enter a state name or province.
Example: “Casablanca”.
City
Enter a city name.
Example: “Casablanca”.
Organization
Enter the organization name.
Example: “GS”.
Email Address
Enter an email address.
Example: “user@grandstream.com”.
d.
Click on
after completing all the fields for the client certificate.
e.
Click on
to export the client certificate file in “.crt” format.
f.
Click on
to export the client key file in “.key” format.