generating TLS client certificates on Windows
Wondering how to generate client certificates on Windows? Is there a windows equivalent of: ./gentls_cert create_client -cn Client1 -out Client1 I am using the latest source from Git. Thanks.
Maybe this is what you're lokking for? http://wiki.freeswitch.org/wiki/Generating_TLS_certificates_%28win32%29 /Peter ________________________________ Från: freeswitch-users-bounces@lists.freeswitch.org [freeswitch-users-bounces@lists.freeswitch.org] för Maxim Suzuki [maximsuzuki@gmail.com] Skickat: den 8 april 2012 04:52 Till: freeswitch-users@lists.freeswitch.org Ämne: [Freeswitch-users] generating TLS client certificates on Windows Wondering how to generate client certificates on Windows? Is there a windows equivalent of: ./gentls_cert create_client -cn Client1 -out Client1 I am using the latest source from Git. Thanks. !DSPAM:4f817daf32762008726396!
Thanks but this wiki entry only describes how to generate the CA root and server certificates on Windows: cafile.pem agent.pem I'm looking for the equivalent of the following command on Windows: ./gentls_cert create_client -cn Client1 -out Client1 ... to generate: Client1.pem -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Peter Olsson Sent: Sunday, April 08, 2012 8:14 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] generating TLS client certificates on Windows Maybe this is what you're lokking for? http://wiki.freeswitch.org/wiki/Generating_TLS_certificates_%28win32%29 /Peter ________________________________ Från: freeswitch-users-bounces@lists.freeswitch.org [freeswitch-users-bounces@lists.freeswitch.org] för Maxim Suzuki [maximsuzuki@gmail.com] Skickat: den 8 april 2012 04:52 Till: freeswitch-users@lists.freeswitch.org Ämne: [Freeswitch-users] generating TLS client certificates on Windows Wondering how to generate client certificates on Windows? Is there a windows equivalent of: ./gentls_cert create_client -cn Client1 -out Client1 I am using the latest source from Git. Thanks. !DSPAM:4f817daf32762008726396! _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi Maxim, Take a look at the gentls_cert script it has the openssl.cfg and commands used to generate the certs. As the wiki details getting openssl working in windows you should be able to replicate it without issue. ~mitch
Thanks Mitch. That looks like the best approch. On Apr 8, 2012 11:04 PM, "Mitch Capper" <mitch.capper@gmail.com> wrote:
Hi Maxim, Take a look at the gentls_cert script it has the openssl.cfg and commands used to generate the certs. As the wiki details getting openssl working in windows you should be able to replicate it without issue.
~mitch
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Has anyone reverse engineered the gentls_cert script for the generation of "CLIENT" certs on Windows using openssl? -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Mitch Capper Sent: Sunday, April 08, 2012 11:03 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] generating TLS client certificates on Windows Hi Maxim, Take a look at the gentls_cert script it has the openssl.cfg and commands used to generate the certs. As the wiki details getting openssl working in windows you should be able to replicate it without issue. ~mitch _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
It should not involve much reverse engineering as gentls_cert is pretty simple and the commands are the same in windows as linux. Also there is nothing magical about the certificates FS uses so googling: https://encrypted.google.com/search?q=openssl%20windows%20client%20certifica... Should give decent results and guides, however to help I have attached the openssl config file that gentls_cert produces which should give you 90%. A fairly low bounty could probably get a .net openssl wrapper for certificate generation made also. Finally keep in mind cygwin with openssl would probably allow gentls to work out of the box too. ~Mitch
Thanks again Mitch. I'll chase down both options and report back. -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Mitch Capper Sent: Tuesday, April 10, 2012 11:52 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] generating TLS client certificates on Windows It should not involve much reverse engineering as gentls_cert is pretty simple and the commands are the same in windows as linux. Also there is nothing magical about the certificates FS uses so googling: https://encrypted.google.com/search?q=openssl%20windows%20client%20certifica te&ie=UTF-8&oe=UTF-8 Should give decent results and guides, however to help I have attached the openssl config file that gentls_cert produces which should give you 90%. A fairly low bounty could probably get a .net openssl wrapper for certificate generation made also. Finally keep in mind cygwin with openssl would probably allow gentls to work out of the box too. ~Mitch
Cygwin ran the gentls_cert scripts perfectly on Windows 7 using Cygwin 1.7.13-1 Thanks again Mitch! -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Mitch Capper Sent: Tuesday, April 10, 2012 11:52 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] generating TLS client certificates on Windows It should not involve much reverse engineering as gentls_cert is pretty simple and the commands are the same in windows as linux. Also there is nothing magical about the certificates FS uses so googling: https://encrypted.google.com/search?q=openssl%20windows%20client%20certifica te&ie=UTF-8&oe=UTF-8 Should give decent results and guides, however to help I have attached the openssl config file that gentls_cert produces which should give you 90%. A fairly low bounty could probably get a .net openssl wrapper for certificate generation made also. Finally keep in mind cygwin with openssl would probably allow gentls to work out of the box too. ~Mitch
participants (3)
-
Maxim Suzuki
-
Mitch Capper
-
Peter Olsson