Could you please help advise more details£¿ how should i do to implement your advise... i have very few knowledge about pki, certificate and tls, thanks a lot! :)
BR,Charles
You do realize that if your org does have an existing PKI
infrastructure, you can in theory skip all of that. You just need to
know the right values to configure and that's about it. (wink, wink,
nudge, nudge) :)
On Sun, Jul 29, 2012 at 11:23 AM, Mitch Capper <mitch.capper@gmail.com> wrote:
> Try running head from GIT and let us know if you still have a problem.
>
> ~mitch
>
> On Sun, Jul 29, 2012 at 5:25 AM, fieldpeak <fieldpeak@gmail.com> wrote:
>> Hi Masters,
>>
>>
>>
>> I'm testing the TLS on FS to work with softphone.
>>
>>
>>
>> followed the wiki
>> (http://wiki.freeswitch.org/wiki/Tls#EyeBeam.2FBria_Setup),
>>
>>
>>
>> I generated the CA (root) certificate by below command, however, when i
>> install the root certificate on windows, it prompt me that the valid period
>> is for only one month. I tried to change the "DAYS=2190" inside the
>> "gentls_cert" script, but it only effect on server certificate(agent.pem)
>> but not root certificate (cafile.pem), Could anyone please help me,
>> appreciated for your any advise!!
>>
>>
>>
>> ./gentls_cert setup -cn fs.audiocodes.com.cn -alt DNS:fs.audiocodes.com.cn
>> -org audiocodes.com.cn
>>
>>
>>
>> below is from wiki.
>>
>> This will create CA certificate and key along with in conf/ssl/CA
>> directory(cacert.pem, cakey.pem) and certificate in the conf/ssl
>> folder(cafile.pem).
>>
>> [ Note: The name given for -cn and -alt should be the same as the DNS name
>> of your freeswitch installation and used as the registrar name on the phone
>> (at least on Polycoms). ] You can change the "DAYS=2190" line in the
>> gentls_cert file to make the certificate valid for longer time. However
>> making it too long has some wrap around problem, it appears.
>>
>>
>> To short, I want to change the valid period longer for the cafile.pem ,
>> thanks!!
>>
>>
>> --
>> Regards,
>> Charles
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting@freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> FreeSWITCH-powered IP PBX: The CudaTel Communication Server
>> http://www.cudatel.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> Join Us At ClueCon - Aug 7-9, 2012
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users@lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting@freeswitch.org
> http://www.freeswitchsolutions.com
>
> FreeSWITCH-powered IP PBX: The CudaTel Communication Server
> http://www.cudatel.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> Join Us At ClueCon - Aug 7-9, 2012
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users@lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org