Mikrotik - create certificates

Soldato
Joined
9 Mar 2012
Posts
10,083
Location
West Sussex, England
Just picked up a Mikrotik hex RB750Gr3...

Looking at creating certificates (CA, server & client) but the example also refers to 'ca-crl-host' which I'm not sure the context of the IP address used in each example I've seen. Some examples seem to use the IP that relates to the PC being used for admin config of the router, some use the localhost IP and some use an IP completely different to the LAN IP range.

/certificate
add name=ca-template common-name=myCa key-usage=key-cert-sign,crl-sign
add name=server-template common-name=server
add name=client1-template common-name=client1
add name=client2-template common-name=client2

/certificate
sign ca-template ca-crl-host=10.5.101.16 name=myCa
sign server-template ca=myCa name=server
sign client1-template ca=myCa name=client1
sign client2-template ca=myCa name=client2


Is the 'ca-crl-host' meant to relate to a 'SCEP Server'?
 
Back
Top Bottom