Smarter by Design.Simpler for Business
lb certificate-request
The lb certificate-request command lists and manages the certificate signing requests (CSR) created in order to be signed by an external certificate authority. Its panel equivalent is the request records on the SSL/TLS Certificates screen.
The request is created not with this command but with create-csr
The key and the request are created on the device with the lb certificate create-csr command; the key does not leave the device. This command is for viewing, naming and deleting the request records that are formed.
Command Summary
# Tab after the command
admin@TR7LBWAF01> lb certificate-request
add delete list show update
admin@TR7LBWAF01> lb certificate-request list # list all of them
admin@TR7LBWAF01> lb certificate-request show <id> # show one
admin@TR7LBWAF01> lb certificate-request add name <name> …
admin@TR7LBWAF01> lb certificate-request update id <id> …
admin@TR7LBWAF01> lb certificate-request delete <id>
admin@TR7LBWAF01>
Required Fields
| Order | Field | Status | Value |
|---|---|---|---|
| 1 | name | Required | The name of the record; it must be unique in the collection |
There is no other required field in the add command; in the show and delete commands the id is written without the field name, and in the update command in the form id <id>.
Fields
| Field | Status | What it does | What is written after it |
|---|---|---|---|
name | Required | Gives a name to the request record | The name of the record; it must be unique in the collection |
--csrSan.N | Optional | Determines the additional names that the request will cover | A domain name or an address; each with its own index |
Examples
# the request creation is done in the certificate command
admin@TR7LBWAF01> lb certificate create-csr name portal-request cn portal.kurum.com.tr
# viewing the requests that are formed and adding an additional name
admin@TR7LBWAF01> lb certificate-request list
admin@TR7LBWAF01> lb certificate-request update id <id> --csrSan.0 www.kurum.com.tr
admin@TR7LBWAF01> lb certificate-request delete <id>
admin@TR7LBWAF01>
Things to Know
- The key does not leave the device. When the request is created, the private key is formed on the device and stays there; only the request to be signed is given outside.
- The record is completed with the signed certificate. When the certificate signed by the external authority is pasted into the record, the request turns into a usable certificate.
- The name is unique. A second request record with the same name cannot be created.
