Richard (Rogers @ work) wrote:
In my trixbox, the certificate for SSL will expire on Saturday, April 19, 2008
10:36:34 PM
Does anyone know how I would get a new one from?
Where is the keystore that stores this certificate and the password to the
keystore?
My trixbox has Asterisk 1.2.14 svn rev 48468 built
Is that your web SSL certificate? If it's anything like the @home boxes
that I have access to you'll find the cert under
/etc/httpd/conf/ssl.crt/server.crt. The server key will be in
/etc/httpd/conf/ssl.key/server.key. To find out for sure look through
the apache config files in /etc/httpd/conf/httpd.conf or
/etc/httpd/conf.d/* and look for references to SSL.
It's probably a self-signed cert generated during installation. Check
out the certificate information using this command:
openssl x509 -in /etc/httpd/conf/ssl.crt/server.crt -text | less
Check the value of Issuer in the results, that will say who created the
cert. You can then contact them and ask for a renewal. If the Issuer
looks generic then it's self signed.
You can keep the key and generate a new self-signed cert using these
commands:
cd /etc/httpd/conf
mv ssl.crt/server.crt ssl.crt/server.crt.old
make testcert
Then answer the questions. For common name you should can use
"[EMAIL PROTECTED]" but you probably want to use the name of the server.
--
*John Van Ostrand* *Net Direct Inc.*
CTO, co-CEO 564 Weber St. N. Unit 12 map
<http://maps.google.ca/maps?q=564+Weber+Street+North+Unit+12,+Waterloo,+ON+N2L+5C6,+Canada&ll=43.494599,-80.548222&spn=0.038450,0.073956&iwloc=A&hl=en>
Waterloo, ON N2L 5C6
[EMAIL PROTECTED] Ph: 866-883-1172 ext.5102
*Linux Solutions / IBM Hardware* Fx: 519-883-8533
