>Subject: Re: [sipx-users] SSL Cert help > >On 1/20/2010 12:27 PM, Raymond Dans wrote: >> Not sure if this will help but did you regenerate and >install the Java >> Keystore/Truststore? If not you may want to try this first. >I'm not sure exactly how to do that, so I guess I hadn't. How >should I do that? The ssl script seems to indicate it is doing >that (see below). >On a side note, I just tried completely rerunning the sipx >setup wizard. >That didn't help. Same result. >I realize my timing here is awful. I am desperate. We have training for >2 hours this afternoon, so I can't rebuild the system from >scratch right now. I really don't want to do that if I don't >have to. We were going to spend this evening staging all the >handsets, but I obviously can't do that if I'm going to have >to rebuild the system. This is a nightmare. It is 100% my >fault. I was trying to squeeze in one more thing before we >went into production, and obviously that was a horrible idea. > >______________________________________________________________________ > > Generating Java Key Store >Enter input keystore passphrase: Enter output keystore >passphrase: Alias >0: nshpbx1.sipx.voip >Adding key for alias nshpbx1.sipx.voip >______________________________________________________________________ > > Generating Java Trust Store >Certificate was added to keystore > > Okay, that part looks okay. I guess the next thing is to ensure that they were installed and have the correct permissions.
SSL Certificates are installed under /etc/sipxpbx/ssl -Ensure that the keystore and jks files are up to date (i.e. the install of them worked). -Ensure that the keystore and jks files are owned by 'sipxchange' -Verify that the keystore and jks are sane by using 'keytool' >keytool -list -keystore ssl.keystore -storepass changeit >keytool -list -keystore authorities.jks -storepass changeit I believe if they display correctly then they're sane. _______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users sipXecs IP PBX -- http://www.sipfoundry.org/
