September 9th, 2015

Самоподписаный сертификат для HTTPS-доступа на Juniper SRX

1. Создаём пару ключей:
request security pki generate-key-pair size 2048 certificate-id webaccess

2. Создаём сертификат:
request security pki local-certificate generate-self-signed certificate-id webaccess email hvostat@hvostat.com domain-name hvostat.local ip-address 192.168.320.410 subject "CN=SRX-77.hvostat.local,OU=IT,O=LongTail LLC,L=Russia,ST=Moscow,C=RU"

3. Назначаем сертификат на HTTPS:
edit
set system services web-management https pki-local-certificate webaccess

4.???
5. Profit!

_