[OpenSIPS-Users] create mediaproxy certificates

[Gary Patton]

Edwin
Thank you!  Thank you!  Thank you!
I didn't know how I was going to generate certificates for MediaProxy from the command line before your post.  I was looking at some stuff on the Internet but it wasn't making any sense.  
As a newbie, I'm trying to learn how to do these things in a way that (I believe) a systems admin needs to know how to do   using the command line.  Your post is really helping me out.
Regards,
Gary


> Date: Thu, 17 Jul 2014 07:41:00 -0700
> From: eahaselhoff at gmail.com
> To: users at lists.opensips.org
> Subject: Re: [OpenSIPS-Users] create mediaproxy certificates
> 
> Hi Adrian,
> 
> I came up with the following commands, which gives me a working set of
> certificates. I only have to take al look how to create the crl.pem (is this
> optional)
> 
> If you want you can add this lines to the Readme (after testing). If anyone
> has tips / comment / additions please let me know.
> 
> # Create SSL certificate authority 
> openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout ca.key.pem -out
> ca.pem -subj
> "/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail at example.com"
> 
> # Create private key
> openssl genrsa -out dispatcher.key 2048
> openssl genrsa -out relay.key 2048
> 
> # Create certificate request
> openssl req -new -key dispatcher.key -out dispatcher.csr -subj
> "/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail at example.com"
> openssl req -new -key relay.key -out relay.csr -subj
> "/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail at example.com"
> 
> # Sign request with CA
> openssl x509 -req -days 3650 -in dispatcher.csr -CA ca.pem -CAkey ca.key.pem
> -set_serial 01 -out dispatcher.crt
> openssl x509 -req -days 3650 -in relay.csr -CA ca.pem -CAkey ca.key.pem
> -set_serial 01 -out relay.crt
> 
> # Place (only) the ca.pem, dispatcher.crt, dispatcher.key, relay.crt,
> relay.key files in de tls folder...
> 
> Cheers,
> 
> Edwin
> 
> 
> 
> --
> View this message in context: http://opensips-open-sip-server.1449251.n2.nabble.com/create-mediaproxy-certificates-tp7592419p7592468.html
> Sent from the OpenSIPS - Users mailing list archive at Nabble.com.
> 
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20140717/39c5a800/attachment.htm>