9.4.4 Deleting Server Certificates and Keys

Use the operation command clear web-authentication ssl-crt to remove the server certificate, private key, and intermediate CA certificate registered on the Switch. Here are the steps:

<Structure of this section>

(1) Deleting a Server Certificate and Key

Log in to administrator mode and execute the operation command clear web-authentication ssl-crt to remove the registered server certificate, private key, and intermediate CA certificate.

Figure 9-45: Deleting a server certificate and key
# clear web-authentication ssl-crt Would you wish to clear SSL key and certificate? (y/n):y ..1 Please restart web-authentication daemon or web-server daemon. #

Enter y to remove the registered server certificate, private key, and intermediate CA certificate.

(2) Confirm the deletion

Run the operational command show web-authentication ssl-crt to verify that the server certificate, private key, and intermediate CA certificate have been deleted.

Figure 9-46: Confirmation of server certificate and key deletion
# show web-authentication ssl-crt Date 20XX/04/15 10:07:04 UTC DATE SSL key : default now SSL certificate : default now SSL intermediate cert: -

(3) Restart the web server

Execute the operation-command restart web-authentication web-server to restart Web servers.

Figure 9-47: Restarting Web Servers
# restart web-authentication web-server

(4) Checking the Startup of Web Servers

Use ps command. Make sure that Web servers (httpd) are running.

Figure 9-48: Verifying Web Servers Startup
# ps -auwx \| grep httpd root 471 0.0 0.1 212 672 ?? S 6:19PM 0:00.52 /usr/local/sbin/httpd -DS_WA -DSSL -DWA_SSL operator 11070 0.0 0.1 164 556 00 S+ 6:20PM 0:00.01 sh -c ps -auwx \| grep httpd operator 11421 0.0 0.0 32 36 00 R+ 6:20PM 0:00.00 grep httpd

Figure 9-48: Verifying Web Servers Startup

# ps -auwx | grep httpd
root       471  0.0  0.1   212    672 ??  S     6:19PM  0:00.52 /usr/local/sbin/httpd -DS_WA -DSSL -DWA_SSL
operator 11070  0.0  0.1   164    556 00  S+    6:20PM  0:00.01 sh -c ps -auwx | grep httpd
operator 11421  0.0  0.0    32     36 00  R+    6:20PM  0:00.00 grep httpd