<p>Could you please help advise more details£¿ how should i do to implement your advise... i have very few knowledge about pki, certificate and tls, thanks a lot! :)</p>
<p>BR,Charles</p>
<div class="gmail_quote">ÔÚ 2012-7-30 ÉÏÎç4:57£¬"curriegrad2004" <<a href="mailto:curriegrad2004@gmail.com">curriegrad2004@gmail.com</a>>дµÀ£º<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
You do realize that if your org does have an existing PKI<br>
infrastructure, you can in theory skip all of that. You just need to<br>
know the right values to configure and that's about it. (wink, wink,<br>
nudge, nudge) :)<br>
<br>
On Sun, Jul 29, 2012 at 11:23 AM, Mitch Capper <<a href="mailto:mitch.capper@gmail.com">mitch.capper@gmail.com</a>> wrote:<br>
> Try running head from GIT and let us know if you still have a problem.<br>
><br>
> ~mitch<br>
><br>
> On Sun, Jul 29, 2012 at 5:25 AM, fieldpeak <<a href="mailto:fieldpeak@gmail.com">fieldpeak@gmail.com</a>> wrote:<br>
>> Hi Masters,<br>
>><br>
>><br>
>><br>
>> I'm testing the TLS on FS to work with softphone.<br>
>><br>
>><br>
>><br>
>> followed the wiki<br>
>> (<a href="http://wiki.freeswitch.org/wiki/Tls#EyeBeam.2FBria_Setup" target="_blank">http://wiki.freeswitch.org/wiki/Tls#EyeBeam.2FBria_Setup</a>),<br>
>><br>
>><br>
>><br>
>> I generated the CA (root) certificate by below command, however, when i<br>
>> install the root certificate on windows, it prompt me that the valid period<br>
>> is for only one month. I tried to change the "DAYS=2190" inside the<br>
>> "gentls_cert" script, but it only effect on server certificate(agent.pem)<br>
>> but not root certificate (cafile.pem), Could anyone please help me,<br>
>> appreciated for your any advise!!<br>
>><br>
>><br>
>><br>
>> ./gentls_cert setup -cn <a href="http://fs.audiocodes.com.cn" target="_blank">fs.audiocodes.com.cn</a> -alt DNS:<a href="http://fs.audiocodes.com.cn" target="_blank">fs.audiocodes.com.cn</a><br>
>> -org <a href="http://audiocodes.com.cn" target="_blank">audiocodes.com.cn</a><br>
>><br>
>><br>
>><br>
>> below is from wiki.<br>
>><br>
>> This will create CA certificate and key along with in conf/ssl/CA<br>
>> directory(cacert.pem, cakey.pem) and certificate in the conf/ssl<br>
>> folder(cafile.pem).<br>
>><br>
>> [ Note: The name given for -cn and -alt should be the same as the DNS name<br>
>> of your freeswitch installation and used as the registrar name on the phone<br>
>> (at least on Polycoms). ] You can change the "DAYS=2190" line in the<br>
>> gentls_cert file to make the certificate valid for longer time. However<br>
>> making it too long has some wrap around problem, it appears.<br>
>><br>
>><br>
>> To short, I want to change the valid period longer for the cafile.pem ,<br>
>> thanks!!<br>
>><br>
>><br>
>> --<br>
>> Regards,<br>
>> Charles<br>
>><br>
>><br>
>> _________________________________________________________________________<br>
>> Professional FreeSWITCH Consulting Services:<br>
>> <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
>> <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
>><br>
>> FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
>> <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
>><br>
>> Official FreeSWITCH Sites<br>
>> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
>> <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
>> <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
>><br>
>> Join Us At ClueCon - Aug 7-9, 2012<br>
>><br>
>> FreeSWITCH-users mailing list<br>
>> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
>> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
>> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
>> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
>><br>
><br>
> _________________________________________________________________________<br>
> Professional FreeSWITCH Consulting Services:<br>
> <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
> <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
><br>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
> <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
><br>
> Official FreeSWITCH Sites<br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
> <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
> <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
><br>
> Join Us At ClueCon - Aug 7-9, 2012<br>
><br>
> FreeSWITCH-users mailing list<br>
> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
Join Us At ClueCon - Aug 7-9, 2012<br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div>