On Fri, 2008-11-14 at 22:31 +0100, Michal Bielicki wrote:
> I have a request for something to be cut out of sipx-setup. Cut out,  
> forgotten, never touched again.
> That is, the timezone changes. Why on earth is an application setup  
> script changing my servers timezone (server is located in Berlin,  
> Germany) to EST ? Do we now assume that sipxecs has teleporting powes  
> and teleports every telephony server in the world to the eastcoast of  
> the US ?
> 
> Could that please stop ?

First of all... 
  sipx-setup doesn't set the timezone.  
  sipx-setup-system does.

If you have a system whose clock and timezone and network interfaces are
already configured correctly, DO NOT RUN sipx-setup-system - you can
just run sipx-setup if you're not starting from a brand new ISO install.

Some background...

It is important that the setup scripts be sure that the time has been
set and the timezone established before it generates the self-signed
certificates that are the core of sipXecs security.  If the time and
timezone are not stable, the certificates can be generated with validity
periods that are in the future when the services actually do start - in
which case nothing works.  

There is no way (that I have been able to find) to generate back-dated
certificates that are valid in the past.

The old setup scripts solved this problem by prompting the user for the
time - even a user-supplied time is accurate enough for this purpose,
since no one will be off by that much.  But to get a reliable
user-supplied time you must get a timezone too.  

In an attempt to get the setup scripts to ask fewer questions, we have
tried to make more things automatic.  The current sipx-setup-system
script tries to contact 3 ntp pool servers to get the time (since that's
universal time, we don't need the timezone).  If the script cannot ping
any of the time servers (which requires net connectivity and working
dns), it sets the time to midnight Jan 1 2008 (because we know that's in
the past), and generates the certs with that.

I'm more than willing to entertain putting back the screens in the
sipx-setup-system script to get the timezone from the user, and can
prompt for a time if the automatic thing doesn't work as before.

Opinions?


_______________________________________________
sipx-dev mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev

Reply via email to