61
Expert Power Control 8221/8226
© 2021 GUDE Systems GmbH
Specifications
openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl req -x509 -days 365 -key server.key -in server.csr -out server.crt
The server keys should be created with "openssl genrsa". The Gude device pro-
cesses keys in the traditional PKCS#1 format. This can be recognized by the fact that
the generated key file starts with "-----BEGIN RSA PRIVATE KEY-----". If the file starts
with "-----BEGIN PRIVATE KEY-----", the file is in PKCS#8 format and the key is not re-
cognized. If you have only a key in PKCS#8 format, you can convert it to PKCS#1 with
openssl: "
openssl rsa -in pkcs8.key -out pkcs1.key
".
ECC Certificate with Sign Request:
openssl ecparam -genkey -name prime256v1 -out server.key
openssl req -new -key server.key -out server.csr
openssl req -x509 -days 365 -key server.key -in server.csr -out server.crt
If you have created your key and certificate, both files are concatenated to one file:
Linux:
cat server.crt server.key > server.pem
Windows:
copy server.crt + server.key server.pem
The created server.pem can only be uploaded in the maintenance section of the
device.
If several certificates (Intermediate CRT's) should also be uploaded to the device,
one should make sure, that firstly the server certificate and secondly the Intermediates
are assembled , e.g:
cat server.crt IM1.crt IM2.crt server.key > server.pem
An uploaded certificate will be preserved, when a device is put back to factory de-
.
Performance Considerations
If RSA 4096 certificates are used, the first access to the web server can take 8-10
seconds, because the math unit of the embedded CPU is highly demanded. After that,
the parameters are in the SSL session cache, so all other requests are just as fast as
with other certificate lengths. For a quick response even on the first access, we recom-
mend RSA 2048-bit certificates that offer adequate security, too.
4.7
Console
For the configuration and control of the device, there is a set of commands with para-
meters that can be entered through a console. The console is available via Telnet, or
for devices with RS232 port through using a serial terminal. It is not necessary to use
Telnet, in
Raw Mode
a simple TCP/IP connection is sufficient to send commands. The
communication can also be performed automated (e.g. via scripting languages). The
22
Summary of Contents for Expert Power Control 8221 Series
Page 2: ...2 Expert Power Control 8221 8226 2021 GUDE Systems GmbH ...
Page 5: ...Device Description ...
Page 13: ...13 Expert Power Control 8221 8226 2021 GUDE Systems GmbH Device Description ...
Page 14: ...Operating ...
Page 24: ...Configuration ...
Page 50: ...Specifications ...
Page 91: ...Support ...
