Hi john,
This is what I was looking for. Thanks for the helpful information.
cheers,
Richard
----- Original Message -----
From: "John Van Ostrand" <[EMAIL PROTECTED]>
To: "TAUG" <[email protected]>
Sent: Thursday, January 10, 2008 12:41 PM
Subject: Re: [on-asterisk] SSL certificate in asterisk expires in April this
year
Richard (Rogers @ work) wrote:
In my trixbox, the certificate for SSL will expire on Saturday, April
19, 2008 10:36:34 PM
Does anyone know how I would get a new one from?
Where is the keystore that stores this certificate and the password to
the keystore?
My trixbox has Asterisk 1.2.14 svn rev 48468 built
Is that your web SSL certificate? If it's anything like the @home boxes
that I have access to you'll find the cert under
/etc/httpd/conf/ssl.crt/server.crt. The server key will be in
/etc/httpd/conf/ssl.key/server.key. To find out for sure look through
the apache config files in /etc/httpd/conf/httpd.conf or
/etc/httpd/conf.d/* and look for references to SSL.
It's probably a self-signed cert generated during installation. Check
out the certificate information using this command:
openssl x509 -in /etc/httpd/conf/ssl.crt/server.crt -text | less
Check the value of Issuer in the results, that will say who created the
cert. You can then contact them and ask for a renewal. If the Issuer
looks generic then it's self signed.
You can keep the key and generate a new self-signed cert using these
commands:
cd /etc/httpd/conf
mv ssl.crt/server.crt ssl.crt/server.crt.old
make testcert
Then answer the questions. For common name you should can use
"[EMAIL PROTECTED]" but you probably want to use the name of the
server.
--
*John Van Ostrand* *Net Direct Inc.*
CTO, co-CEO 564 Weber St. N. Unit 12 map
<http://maps.google.ca/maps?q=564+Weber+Street+North+Unit+12,+Waterloo,+ON+N2L+5C6,+Canada&ll=43.494599,-80.548222&spn=0.038450,0.073956&iwloc=A&hl=en>
Waterloo, ON N2L 5C6
[EMAIL PROTECTED] Ph: 866-883-1172 ext.5102
*Linux Solutions / IBM Hardware* Fx: 519-883-8533
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
