The Black PERL

A good document on PowerScale SSL Certificates: LINK PDF

_____________________________________________________________________

Here are my Cryptic command line / notes on when i did it. 4/2023 on v9.5

https://www.dell.com/support/kbdoc/en-us/000157711/isilon-onefs-how-to-replace-or-renew-the-ssl-certificate-used-for-the-isilon-web-administration-interface

openssl genrsa -out server.key 2048

Single request: openssl req -new -nodes -key server.key -out server.csr

openssl req -new -nodes -key server.key -out server.csr -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:ps1.delludslabnj.net,DNS:s3.delludslabnj.net,DNS:powerscale1.delludslbnj.net"))

SAVE AS BASE64, rename to server.crt

isi certificate server import /ifs/local/server.crt /ifs/local/server.key

isi certificate server list -v

isi certificate settings modify --default-https-certificate=<id_of_cert_to_set_as_default>
isi certificate settings modify --default-https-certificate=ed6d730127741ed7a0bbea6ad5aaac7a66bd84e31aa8ea4fdbdf09322c622fa1

isi certificate settings view

isi certificate server view --id=ed6d730127741ed7a0bbea6ad5aaac7a66bd84e31aa8ea4fdbdf09322c622fa1

isi certificate server delete --id=<id_of_cert_to_delete>


echo QUIT | openssl s_client -connect localhost:8080


https://stackoverflow.com/questions/32946050/ssl-certificate-verify-failed-in-aws-cli
setx AWS_CA_BUNDLE "Y:\Certificates\EntRootCA_Base64.cer"

create a self signed
openssl x509 -req -days 730 -in /ifs/local/server.csr -signkey /ifs/local/server.key -out /ifs/local/serverselfsigned.crt
isi certificate settings modify --default-https-certificate=