NX-OS PKI SHA2 CSR

Andrew Devine — Thu, 27 Apr 2017 14:27:00 GMT

Hi,

For our production implementation of Cisco Nexus Data Broker on Nexus 3100 series switches we are using centralised mode and OpenFlow. In order to secure the connection between the controller and switch we require TLS and the use of our enterprise PKI. Our PKI supports only SHA2 certificates and has specific requirements for fields to be included in the CSR.

Creating the CSR on within NX-OS provides extremely limited options and all requests are SHA-1. SHA-1 was officially deprecated by NIST in 2011 yet I see no way of using SHA2 certificates with NX-OS.

I thought of creating the certificate using openssl and then importing in PKCS#12 Format, but not sure whether that will work? Any thoughts?

Cheers,

Andrew

Re: NX-OS PKI SHA2 CSR

Andrew Devine — Mon, 12 Nov 2018 13:31:12 GMT

Solved this by enabling bash and using openssl, then importing a pcks12 file

topic NX-OS PKI SHA2 CSR in Application Networking

NX-OS PKI SHA2 CSR

Re: NX-OS PKI SHA2 CSR