[Freeswitch-users] Help!! FS -TLS interworking issue, How to config to allow "gentls_cert" to generate a root certificate with more longer valid-period ?

[Mitch Capper]

Is anyone else able to confirm a problem on CentOS 5.7 with the
genttls_cert from head?    I have tried it on CentOS 6 and some pre 5
fedora boxes that all seem to work correctly but I do not have any
running CentOS 5.  To test run:
./gentls_cert setup && ./gentls_cert create_server
openssl x509 -noout -in /usr/local/freeswitch/conf/ssl/agent.pem  -enddate
openssl x509 -noout -in /usr/local/freeswitch/conf/ssl/cafile.pem  -enddate

The date should be in 2018.

if you get any errors please let us know the error.

~Mitch

On Wed, Aug 1, 2012 at 8:12 AM, Jerry Richards
<jerry.richards at teotech.com> wrote:
> The platform Robert and I are using is CentOS 5.7.
>
> Jerry
>
> -----Original Message-----
> From: freeswitch-users-bounces at lists.freeswitch.org [mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Mitch Capper
> Sent: Wednesday, August 01, 2012 7:57 AM
> To: FreeSWITCH Users Help
> Subject: Re: [Freeswitch-users] Help!! FS -TLS interworking issue, How to config to allow "gentls_cert" to generate a root certificate with more longer valid-period ?
>
> The changes to the attached genttls script verse headis the DAYS was
> set to 365 instead of 2190 (6 years).   In addition the days variable
> was quoted in two places it was not quoted.   6 years should not be
> the cause of any problems so we are left with the quoting.   I tested
> across 4 platforms without finding the quoting to be an issue.
>
> Robert can you let us know what platform has an issue with the days param not being quoted for days = 2190?
>
> ~mitch
>
> On Mon, Jul 30, 2012 at 10:07 AM, Michael Collins <msc at freeswitch.org> wrote:
>>
>>
>> On Mon, Jul 30, 2012 at 9:28 AM, Robert Hadley
>> <robert.hadley at teotech.com>
>> wrote:
>>>
>>> Hi Charles,
>>>
>>>
>>>
>>> Try the changes in this attached freeswitch/scripts/gentls_cert.in file.
>>> There were a few typos in the original script.
>>>
>>>
>>>
>>> Regards,
>>>
>>> Robert
>>
>>
>> I'd like to verify that those typos are indeed really typos and are
>> really fixed. If anyone has input on them please let me know and I
>> will see about getting the gentls_cert.in file updated. I definitely
>> would like to see this tested before we make any updates.
>>
>> Thanks,
>> MC
>>
>> ______________________________________________________________________
>> ___ Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> Join Us At ClueCon - Aug 7-9, 2012
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use
>> rs
>> http://www.freeswitch.org
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
>  
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> Join Us At ClueCon - Aug 7-9, 2012
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> Join Us At ClueCon - Aug 7-9, 2012
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org