[Freeswitch-users] Help!! FS -TLS interworking issue, How to config to allow "gentls_cert" to generate a root certificate with more longer valid-period ?

[curriegrad2004]

You do realize that if your org does have an existing PKI
infrastructure, you can in theory skip all of that. You just need to
know the right values to configure and that's about it. (wink, wink,
nudge, nudge) :)

On Sun, Jul 29, 2012 at 11:23 AM, Mitch Capper <mitch.capper at gmail.com> wrote:
> Try running head from GIT and let us know if you still have a problem.
>
> ~mitch
>
> On Sun, Jul 29, 2012 at 5:25 AM, fieldpeak <fieldpeak at gmail.com> wrote:
>> Hi Masters,
>>
>>
>>
>> I'm testing the TLS on FS to work with softphone.
>>
>>
>>
>> followed the wiki
>> (http://wiki.freeswitch.org/wiki/Tls#EyeBeam.2FBria_Setup),
>>
>>
>>
>> I generated the CA (root) certificate by below command, however, when i
>> install the root certificate on windows, it prompt me that the valid period
>> is for only one month. I tried to change the "DAYS=2190" inside the
>> "gentls_cert" script, but it only effect on server certificate(agent.pem)
>> but not root certificate (cafile.pem), Could anyone please help me,
>> appreciated for your any advise!!
>>
>>
>>
>> ./gentls_cert setup -cn fs.audiocodes.com.cn -alt DNS:fs.audiocodes.com.cn
>> -org audiocodes.com.cn
>>
>>
>>
>> below is from wiki.
>>
>> This will create CA certificate and key along with in conf/ssl/CA
>> directory(cacert.pem, cakey.pem) and certificate in the conf/ssl
>> folder(cafile.pem).
>>
>>  [ Note: The name given for -cn and -alt should be the same as the DNS name
>> of your freeswitch installation and used as the registrar name on the phone
>> (at least on Polycoms). ] You can change the "DAYS=2190" line in the
>> gentls_cert file to make the certificate valid for longer time. However
>> making it too long has some wrap around problem, it appears.
>>
>>
>> To short, I want to change the valid period longer for the cafile.pem ,
>> thanks!!
>>
>>
>> --
>> Regards,
>> Charles
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> Join Us At ClueCon - Aug 7-9, 2012
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> Join Us At ClueCon - Aug 7-9, 2012
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org