On Fri, 2009-03-27 at 12:44 -0400, M. Ranganathan wrote: > >> My question is does generate-ssl-keys.sh and install-ssl-keys.sh get > >> called when you install the secondary server? I dont know because I > >> did not write that script.
> >> Perhaps Arjun can put some tracing into it and try doing an HA > >> install to see if it gets called for HA install and what the arguments > >> are. On Thu, Mar 26, 2009 at 11:47 AM, Arjun Nair <[email protected]> wrote: > > No, gen-ssl-keys.sh and install-cert.sh do not get called on the > secondary server (I have deleted both these files from my secondary). > Furthermore, the md5sum remains unchanged from the certs that are > generated by the primary server (by ./libexec/sipXecs/initial-config, > to be used in the secondary) and the certs being used in the secondary > server. > Not sure what is happening exactly and why it is not getting called : The initial-config script is not called _ON_ the secondary because it's not supposed to be. All the files are generated on the master and installed (using the scripts) into a local temporary directory. That directory is then tarred up and sent to the d.s., and then untarred into their final locations. > In the bottom of initial-config.sh.in I see > > # generate TLS credentials > @SIPX_BINDIR@/ssl-cert/gen-ssl-keys.sh \ > --workdir "@SIPX_VARDIR@/certdb" -d -s "${newHostname}" \ > || exit 1 > @SIPX_BINDIR@/ssl-cert/install-cert.sh \ > --workdir "@SIPX_VARDIR@/certdb" --install-prefix > "${INITIAL_CONFIG}" "${newHostname}" \ > || exit 1 > > I guess I need to set up a HA system and see whats cooking here. _______________________________________________ sipx-dev mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-dev Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
