Could you please help advise more details？ how should i do to implement your advise... i have very few knowledge about pki, certificate and tls, thanks a lot! :) BR,Charles 在 2012-7-30 上午4:57，"curriegrad2004" <curriegrad2004@gmail.com>写道：
You do realize that if your org does have an existing PKI infrastructure, you can in theory skip all of that. You just need to know the right values to configure and that's about it. (wink, wink, nudge, nudge) :)
On Sun, Jul 29, 2012 at 11:23 AM, Mitch Capper <mitch.capper@gmail.com> wrote:
Try running head from GIT and let us know if you still have a problem.
~mitch
On Sun, Jul 29, 2012 at 5:25 AM, fieldpeak <fieldpeak@gmail.com> wrote:
Hi Masters,
I'm testing the TLS on FS to work with softphone.
followed the wiki (http://wiki.freeswitch.org/wiki/Tls#EyeBeam.2FBria_Setup),
I generated the CA (root) certificate by below command, however, when i install the root certificate on windows, it prompt me that the valid period is for only one month. I tried to change the "DAYS=2190" inside the "gentls_cert" script, but it only effect on server certificate(agent.pem) but not root certificate (cafile.pem), Could anyone please help me, appreciated for your any advise!!
./gentls_cert setup -cn fs.audiocodes.com.cn -alt DNS: fs.audiocodes.com.cn -org audiocodes.com.cn
below is from wiki.
This will create CA certificate and key along with in conf/ssl/CA directory(cacert.pem, cakey.pem) and certificate in the conf/ssl folder(cafile.pem).
[ Note: The name given for -cn and -alt should be the same as the DNS name of your freeswitch installation and used as the registrar name on the phone (at least on Polycoms). ] You can change the "DAYS=2190" line in the gentls_cert file to make the certificate valid for longer time. However making it too long has some wrap around problem, it appears.
To short, I want to change the valid period longer for the cafile.pem , thanks!!
-- Regards, Charles
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org