[OpenSIPS-Users] create mediaproxy certificates

[Edwin]

Hi Adrian,

I came up with the following commands, which gives me a working set of
certificates. I only have to take al look how to create the crl.pem (is this
optional)

If you want you can add this lines to the Readme (after testing). If anyone
has tips / comment / additions please let me know.

# Create SSL certificate authority 
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout ca.key.pem -out
ca.pem -subj
"/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail at example.com"

# Create private key
openssl genrsa -out dispatcher.key 2048
openssl genrsa -out relay.key 2048

# Create certificate request
openssl req -new -key dispatcher.key -out dispatcher.csr -subj
"/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail at example.com"
openssl req -new -key relay.key -out relay.csr -subj
"/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail at example.com"

# Sign request with CA
openssl x509 -req -days 3650 -in dispatcher.csr -CA ca.pem -CAkey ca.key.pem
-set_serial 01 -out dispatcher.crt
openssl x509 -req -days 3650 -in relay.csr -CA ca.pem -CAkey ca.key.pem
-set_serial 01 -out relay.crt

# Place (only) the ca.pem, dispatcher.crt, dispatcher.key, relay.crt,
relay.key files in de tls folder...

Cheers,

Edwin



--
View this message in context: http://opensips-open-sip-server.1449251.n2.nabble.com/create-mediaproxy-certificates-tp7592419p7592468.html
Sent from the OpenSIPS - Users mailing list archive at Nabble.com.