show ssl-certificates
Syntax
show ssl certificates
Description
Display information about the Secure Sockets Layer (SSL) certificates installed on the switch. When you configure PEAP as the authentication protocol for MAC RADIUS authentication, you must load the server-side Secure Sockets Layer (SSL) certificate on the switch. PEAP requires an SSL certificate to create a secure TLS tunnel to protect user authentication, and uses server-side public key certificates to authenticate the server. It then creates an encrypted TLS tunnel between the client and the authentication server. The key for this encryption are transported using the server's public key. The ensuing exchange of authentication information inside the tunnel to authenticate the client is then encrypted and user credentials are safe from eavesdropping.
Options
none | Display information about all SSL certificates. |
detail |
Display information about SSL certificates for the specified level of output. |
Required Privilege Level
view
Output Fields
Table 1 lists the
output fields for the show ssl-certificates
command. Output
fields are listed in the approximate order in which they appear.
Field Name |
Field Description |
Level of Output |
---|---|---|
|
Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:
|
All levels |
|
Start time when the digital certificate becomes valid. |
|
|
End time when the digital certificate becomes invalid. |
|
|
Unique serial number of the digital certificate. |
|
|
Details of the digital certificate holder organized using the distinguished name format. Possible subfields are:
|
|
Sample Output
show ssl-certificates
user@root> show ssl-certificates Issuer: /C=IN/ST=KA/L=Blr/O=JNPR/OU=CP/CN=User-Radius/emailAddress=user@juniper.net
show ssl-certificates detail
user@root> show ssl-certificates detail Issuer: /C=IN/ST=KA/L=Blr/O=JNPR/OU=CP/CN=User-Radius/emailAddress=user@juniper.net Valid From: May 30 17:41:04 2016 GMT Valid Till: May 29 17:41:04 2026 GMT Serial Number: 0 Subject: /C=IN/ST=KA/L=Blr/O=JNPR/OU=CP/CN=User-Radius/emailAddress=user@juniper.net
Release Information
Command introduced in Junos OS Release 17.2R1.