After some testing and false starts, it looks like PKCS#12 does not work but simple concatenation does. Thanks - John
On Mon, 2009-07-27 at 06:38 -0400, John A. Sullivan III wrote: > Thank you although that seems a bit strange. Does one simply > concatenate them together or is it really looking for a PKCS#12 file? > Thanks - John > > On Sun, 2009-07-26 at 10:03 -0700, Eric Chamberlain wrote: > > The pem file should contain both the private key and the certificate. > > > > > > On Jul 24, 2009, at 4:08 PM, John A. Sullivan III wrote: > > > > > Hello, all. After many pages of googling and testing in the lab, I'm > > > still a bit perplexed about how to implement tls protection for the > > > asterisk manager. manager.conf allows one to specify the cert file > > > but > > > one normally must also specify the private key file. If I simply > > > enter > > > the cert file: > > > > > > sslenable=yes > > > sslbindport=5038 > > > sslbindaddr=172.x.x.8 > > > sslcert=/etc/pki/tls/certs/pbxc.pem ; path to the certificate. > > > ; sslcipher=<cipher string> > > > > > > It errors as I expect it would: > > > > > > pbx*CLI> manager reload > > > == Parsing '/etc/asterisk/manager.conf': == Found > > > SSL cert error </etc/pki/tls/certs/pbxc.pem> > > > > > > How does one specify the private key for the manager.conf file? > > > Thanks - > > > John > > > -- > > > John A. Sullivan III > > > Open Source Development Corporation > > > +1 207-985-7880 > > > jsulli...@opensourcedevel.com > > > > > > http://www.spiritualoutreach.com > > > Making Christianity intelligible to secular society > > > > > > > > > _______________________________________________ > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > > > > asterisk-users mailing list > > > To UNSUBSCRIBE or update options visit: > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > > > > > _______________________________________________ > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > > asterisk-users mailing list > > To UNSUBSCRIBE or update options visit: > > http://lists.digium.com/mailman/listinfo/asterisk-users -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 jsulli...@opensourcedevel.com http://www.spiritualoutreach.com Making Christianity intelligible to secular society _______________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- AstriCon 2009 - October 13 - 15 Phoenix, Arizona Register Now: http://www.astricon.net asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
