<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div>Edwin</div><div><br></div><div>Thank you! Thank you! Thank you!</div><div><br></div><div>I didn't know how I was going to generate certificates for MediaProxy from the command line before your post. <span style="font-size: 12pt;">I was looking at some stuff on the Internet but it wasn't making any sense. </span></div><div><span style="font-size: 12pt;"><br></span></div><div><span style="font-size: 12pt;">As a newbie, I'm trying to learn how to do these things in a way that (I believe) a systems admin needs to know how to do using the command line. Your post is really helping me out.</span></div><div><br></div><div>Regards,</div><div><br></div><div>Gary</div><div><br></div><div><br><br><div>> Date: Thu, 17 Jul 2014 07:41:00 -0700<br>> From: eahaselhoff@gmail.com<br>> To: users@lists.opensips.org<br>> Subject: Re: [OpenSIPS-Users] create mediaproxy certificates<br>> <br>> Hi Adrian,<br>> <br>> I came up with the following commands, which gives me a working set of<br>> certificates. I only have to take al look how to create the crl.pem (is this<br>> optional)<br>> <br>> If you want you can add this lines to the Readme (after testing). If anyone<br>> has tips / comment / additions please let me know.<br>> <br>> # Create SSL certificate authority <br>> openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout ca.key.pem -out<br>> ca.pem -subj<br>> "/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail@example.com"<br>> <br>> # Create private key<br>> openssl genrsa -out dispatcher.key 2048<br>> openssl genrsa -out relay.key 2048<br>> <br>> # Create certificate request<br>> openssl req -new -key dispatcher.key -out dispatcher.csr -subj<br>> "/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail@example.com"<br>> openssl req -new -key relay.key -out relay.csr -subj<br>> "/C=NL/ST=NH/L=Amsterdam/O=DEMOTECH/CN=www.example.com/emailAddress=mail@example.com"<br>> <br>> # Sign request with CA<br>> openssl x509 -req -days 3650 -in dispatcher.csr -CA ca.pem -CAkey ca.key.pem<br>> -set_serial 01 -out dispatcher.crt<br>> openssl x509 -req -days 3650 -in relay.csr -CA ca.pem -CAkey ca.key.pem<br>> -set_serial 01 -out relay.crt<br>> <br>> # Place (only) the ca.pem, dispatcher.crt, dispatcher.key, relay.crt,<br>> relay.key files in de tls folder...<br>> <br>> Cheers,<br>> <br>> Edwin<br>> <br>> <br>> <br>> --<br>> View this message in context: http://opensips-open-sip-server.1449251.n2.nabble.com/create-mediaproxy-certificates-tp7592419p7592468.html<br>> Sent from the OpenSIPS - Users mailing list archive at Nabble.com.<br>> <br>> _______________________________________________<br>> Users mailing list<br>> Users@lists.opensips.org<br>> http://lists.opensips.org/cgi-bin/mailman/listinfo/users<br></div></div> </div></body>
</html>