TLS setup failed (after changing key type)
Hi all, My SIP over TLS is working perfect as long as i used gentls_cert script. I have changed script to create ECC keys and changed that script replacing with : openssl ecparam -name secp160r2 -out CA_CURVE.pem openssl req -out "${CONFDIR}/CA/cacert.pem" -new -x509 -keyout "${CONFDIR}/CA/cakey.pem" -newkey ec:CA_CURVE.pem -config "${TMPFILE}.cfg" -nodes -days ${DAYS} -sha1 >/dev/null openssl req -new -out "${TMPFILE}.req" -newkey ec:CA_CURVE.pem -keyout "${TMPFILE}.key" -config "${TMPFILE}.cfg" -nodes -sha1 And since then, i see "TLS setup failed"... any one? -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/TLS-setup-failed-after-changin... Sent from the freeswitch-users mailing list archive at Nabble.com.
I've extracted what you were meaning to do but please next time please provide a diff to gentls_cert.in as that file is generated. /b On Jun 21, 2013, at 9:37 AM, mehroz <mehroz.ashraf85@gmail.com> wrote:
Hi all,
My SIP over TLS is working perfect as long as i used gentls_cert script.
I have changed script to create ECC keys and changed that script replacing with : openssl ecparam -name secp160r2 -out CA_CURVE.pem
openssl req -out "${CONFDIR}/CA/cacert.pem" -new -x509 -keyout "${CONFDIR}/CA/cakey.pem" -newkey ec:CA_CURVE.pem -config "${TMPFILE}.cfg" -nodes -days ${DAYS} -sha1 >/dev/null
openssl req -new -out "${TMPFILE}.req" -newkey ec:CA_CURVE.pem -keyout "${TMPFILE}.key" -config "${TMPFILE}.cfg" -nodes -sha1
And since then, i see "TLS setup failed"... any one?
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/TLS-setup-failed-after-changin... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks Brian! Ill follow that from now onwards. Jira post have been updated with the diff patch as requested. I am actually tryin to do SUITE B standard encryption. Here <http://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography> it is! Please comment .. -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/TLS-setup-failed-after-changin... Sent from the freeswitch-users mailing list archive at Nabble.com.
participants (2)
-
Brian West
-
mehroz