在ONTAP生成的CSR中使用了哪些密钥使用和扩展密钥使用选项?
适用场景
- ONTAP 9
- SSL证书签名请求(CSR)
问题解答
通过生成默认CSR
security certificate generate-csr 将包含以下X.509 v3选项: % openssl req -text -in filename.csrCertificate Request: Data: Version: 0 (0x0) Subject: CN=test Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: <SNIP> Exponent: 65537 (0x10001) Attributes: Requested Extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Client Authentication, TLS Web Server Authentication