Changing the default SSL certificate on AC6005

gululu · Created May 31, 2017 00:58:40

@网络管理员Lemon please help

Ws1plzbf · Created May 31, 2017 06:02:53

Dear, please check the product document , there is one example for Importing Certificates Manually
http://support.huawei.com/ehedex/hdx.do?docid=DOC1000088060&lang=en&clientWidth=1350&browseTime=1496210132225
or you can call the TAC directly to get help,thank you!

Rating

Number of participants 1	E-coins +5	Experience +1	Collapse Reasons
user_2790689	+ 5
user_2790689		+ 1

View All scores

sertan_akyuz · Created Jun 14, 2017 12:31:02

Hi,

That documentation is not really enough. First of all you need to clear most of the ssl config. Following config might be useful.

Commands might give some errors. You should read them and disable/remove whatever is blocking your undo.

pki rsa local-key-pair create cli_rsa exportable

pki export rsa-key-pair cli_rsa pem cli_rsa.pem password PASSWORD

ftp
open FTP.SRV.IP.ADD
put cli_rsa.pem

pki entity cli_entity
country TR
state Ankara
organization CLIGURU
organization-unit CLIGURU
common-name wifi.cliguru.com

pki realm cli_realm
entity cli_entity
rsa local-key-pair cli_rsa

pki enroll-certificate realm cli_realm pkcs10 filename cli_cer_req

ftp
open FTP.SRV.IP.ADD
put cli_cer_req

After CA signed your certificate with you CSR and sent it to you with all CA chain, put all certificates to AC again.

pki import-certificate local realm cli_realm pem filename wifi_cliguru_com.pem replace
pki import-certificate ca realm cli_realm pem filename COMODORSADomainValidationSecureServerCA.pem replace
pki import-certificate ca realm cli_realm pem filename COMODORSAAddTrustCA.pem replace
pki import-certificate ca realm cli_realm pem filename AddTrustExternalCARoot.pem replace

ssl policy cli_ssl type server
ciphersuite rsa_aes_128_cbc_sha rsa_aes_256_sha256 rsa_aes_128_sha256
version tls1.0 tls1.1 tls1.2
pki-realm cli_realm

http secure-server ssl-policy cli_ssl
http secure-server enable

portal local-server ip PORTAL.INTERFACE.IP.ADDRESS
portal local-server load flash:/portalpage.zip
portal local-server url wifi.cliguru.com
portal local-server https ssl-policy cli_ssl port PORT

portal-access-profile name portal_access_profile
portal local-server enable

authentication-profile name portal_authen_profile
portal-access-profile portal_access_profile

authentication-profile name CLIGURU-GUEST
portal-access-profile portal_access_profile

undo http secure-server ssl-policy
authentication-profile name CLIGURU-GUEST
undo portal-access-profile
portal-access-profile name CLIGURU-GUEST
undo portal local-server enable

Rob65 · Created Nov 7, 2021 10:53:47

Really difficult

Changing the default SSL certificate on AC6005

Rating

Third Party’s Trade Secret

`@trans`bright_future`~trans`

`@trans`drinking_poetry`~trans`

My Followers

Enterprise

Consumer

Corporate

Carriers

Changing the default SSL certificate on AC6005

Rating

Third Party’s Trade Secret

`@trans`bright_future`~trans`

`@trans`drinking_poetry`~trans`

My Followers