在ONTAP生成的CSR中使用了哪些密钥使用和扩展密钥使用选项?
适用场景
- ONTAP 9
- SSL证书签名请求(CSR)
问题解答
通过生成默认CSR
security certificate generate-csr
将包含以下X.509 v3选项: % openssl req -text -in filename.csr
Certificate Request:
Data:
Version: 0 (0x0)
Subject: CN=test
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
<SNIP>
Exponent: 65537 (0x10001)
Attributes:
Requested Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Client Authentication, TLS Web Server Authentication