<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"SimSun","serif";
mso-fareast-language:ZH-CN;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"SimSun","serif";
mso-fareast-language:ZH-CN;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi Charles,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Try the changes in this attached freeswitch/scripts/gentls_cert.in file. There were a few typos in the original script.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Robert<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> fieldpeak [mailto:fieldpeak@gmail.com]
<br>
<b>Sent:</b> Sunday, July 29, 2012 5:57 PM<br>
<b>To:</b> FreeSWITCH Users Help<br>
<b>Subject:</b> Re: [Freeswitch-users] Help!! FS -TLS interworking issue, How to config to allow "gentls_cert" to generate a root certificate with more longer valid-period ?<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Could you please help advise more details<span lang="ZH-CN">$B!)(B</span> how should i do to implement your advise... i have very few knowledge about pki, certificate and tls, thanks a lot! :)<o:p></o:p></p>
<p>BR,Charles<o:p></o:p></p>
<div>
<p class="MsoNormal"><span lang="ZH-CN">$B:_(B</span> 2012-7-30 <span lang="ZH-CN">$B>e8a(B</span>4:57<span lang="ZH-CN">$B!$(B</span>"curriegrad2004" <<a href="mailto:curriegrad2004@gmail.com">curriegrad2004@gmail.com</a>><span lang="ZH-CN">$B<LF;!'(B</span><o:p></o:p></p>
<p class="MsoNormal">You do realize that if your org does have an existing PKI<br>
infrastructure, you can in theory skip all of that. You just need to<br>
know the right values to configure and that's about it. (wink, wink,<br>
nudge, nudge) :)<br>
<br>
On Sun, Jul 29, 2012 at 11:23 AM, Mitch Capper <<a href="mailto:mitch.capper@gmail.com">mitch.capper@gmail.com</a>> wrote:<br>
> Try running head from GIT and let us know if you still have a problem.<br>
><br>
> ~mitch<br>
><br>
> On Sun, Jul 29, 2012 at 5:25 AM, fieldpeak <<a href="mailto:fieldpeak@gmail.com">fieldpeak@gmail.com</a>> wrote:<br>
>> Hi Masters,<br>
>><br>
>><br>
>><br>
>> I'm testing the TLS on FS to work with softphone.<br>
>><br>
>><br>
>><br>
>> followed the wiki<br>
>> (<a href="http://wiki.freeswitch.org/wiki/Tls#EyeBeam.2FBria_Setup" target="_blank">http://wiki.freeswitch.org/wiki/Tls#EyeBeam.2FBria_Setup</a>),<br>
>><br>
>><br>
>><br>
>> I generated the CA (root) certificate by below command, however, when i<br>
>> install the root certificate on windows, it prompt me that the valid period<br>
>> is for only one month. I tried to change the "DAYS=2190" inside the<br>
>> "gentls_cert" script, but it only effect on server certificate(agent.pem)<br>
>> but not root certificate (cafile.pem), Could anyone please help me,<br>
>> appreciated for your any advise!!<br>
>><br>
>><br>
>><br>
>> ./gentls_cert setup -cn <a href="http://fs.audiocodes.com.cn" target="_blank">
fs.audiocodes.com.cn</a> -alt DNS:<a href="http://fs.audiocodes.com.cn" target="_blank">fs.audiocodes.com.cn</a><br>
>> -org <a href="http://audiocodes.com.cn" target="_blank">audiocodes.com.cn</a><br>
>><br>
>><br>
>><br>
>> below is from wiki.<br>
>><br>
>> This will create CA certificate and key along with in conf/ssl/CA<br>
>> directory(cacert.pem, cakey.pem) and certificate in the conf/ssl<br>
>> folder(cafile.pem).<br>
>><br>
>> <span style="font-family:"Calibri","sans-serif""> </span>[ Note: The name given for -cn and -alt should be the same as the DNS name<br>
>> of your freeswitch installation and used as the registrar name on the phone<br>
>> (at least on Polycoms). ] You can change the "DAYS=2190" line in the<br>
>> gentls_cert file to make the certificate valid for longer time. However<br>
>> making it too long has some wrap around problem, it appears.<br>
>><br>
>><br>
>> To short, I want to change the valid period longer for the cafile.pem ,<br>
>> thanks!!<br>
>><br>
>><br>
>> --<br>
>> Regards,<br>
>> Charles<br>
>><br>
>><br>
>> _________________________________________________________________________<br>
>> Professional FreeSWITCH Consulting Services:<br>
>> <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
>> <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
>><br>
>> FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
>> <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
>><br>
>> Official FreeSWITCH Sites<br>
>> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
>> <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
>> <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
>><br>
>> Join Us At ClueCon - Aug 7-9, 2012<br>
>><br>
>> FreeSWITCH-users mailing list<br>
>> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
>> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
>> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
>> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
>><br>
><br>
> _________________________________________________________________________<br>
> Professional FreeSWITCH Consulting Services:<br>
> <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
> <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
><br>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
> <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
><br>
> Official FreeSWITCH Sites<br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
> <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
> <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
><br>
> Join Us At ClueCon - Aug 7-9, 2012<br>
><br>
> FreeSWITCH-users mailing list<br>
> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
> <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
Join Us At ClueCon - Aug 7-9, 2012<br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><o:p></o:p></p>
</div>
</div>
</body>
</html>