Tambrea Cosmin wrote:
> Damian Krzeminski wrote:
>> Scott Lawrence wrote:
>>
>>> On Mon, 2009-08-03 at 10:41 -0400, Damian Krzeminski wrote:
>>>
>>>> Anybody knows who/what is supposed to generate authorities.jks?
>>>>
>>> It is generated by the install-cert.sh script, which is normally
>>> executed by the sipxexs-setup{,-system} scripts.
>>>
>>>
>>>
>>>
>>
>> I just tried that and it seems to work.
>> I cleaned my entire etc/sipxecs/ssl directory then ran 'sipxecs-setup'
>>
>> After (doto.lan is my SIP domain):
>>
>> find ssl
>> ssl
>> ssl/.ssl.keystore
>> ssl/authorities.jks
>> ssl/.ssl.keystore-contents.md5
>> ssl/ssl.keystore
>> ssl/ssl-web.keystore
>> ssl/ssl.crt
>> ssl/ssl.key
>> ssl/ssl.p12
>> ssl/authorities
>> ssl/authorities/ca.doto.lan.crt
>> ssl/authorities/e2290099.0
>> ssl/.ssl.p12
>> ssl/.authorities.jks
>> ssl/ssl-web.p12
>> ssl/ssl-web.crt
>> ssl/ssl-web.key
>> ssl/.authorities-contents.md5
>>
>>
>> #java -version
>> java version "1.6.0_0"
>> OpenJDK Runtime Environment (IcedTea6 1.5) (fedora-20.b16.fc10-i386)
>> OpenJDK Server VM (build 14.0-b15, mixed mode)
>>
>> _______________________________________________
>> sipx-dev mailing list [email protected]
>> List Archive: http://list.sipfoundry.org/archive/sipx-dev
>> Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
>> sipXecs IP PBX -- http://www.sipfoundry.org/
>>
>>
> Here is my ssl folder content:
> *$find ssl*
> ssl
> ssl/authorities
> ssl/authorities/03856d91.0
> ssl/authorities/ca.ctambrea-pc.itcnetworks.ro.crt
> ssl/ssl-web.key
> ssl/ssl-web.crt
> ssl/ssl.key
> ssl/ssl.p12
> ssl/ssl-web.p12
> ssl/ssl.crt
> ssl/ssl.keystore
> ssl/ssl-web.keystore
>
> Looking at your files list, it's obvious that some files are not
> generated on my sipx:
> ssl/authorities.jks
> ssl/.ssl.keystore-contents.md5
> ssl/ssl.keystore
> ssl/.ssl.p12
> ssl/.authorities.jks
> ssl/.authorities-contents.md5
>
> I have the same java version installed on my system:
> *$java -version*
> java version "1.6.0_0"
> OpenJDK Runtime Environment (IcedTea6 1.5) (fedora-20.b16.fc10-i386)
> OpenJDK Server VM (build 14.0-b15, mixed mode)
>
> *$javac -version*
> javac 1.6.0_0
>
Maybe you can try running bin/ssl-cert/gen-ssl-keys.sh (in an empty
directory) and see if it creates truststore.
It looks like authorities.jks is created in line 756:
${openssl} x509 -in "${serverName}${restrictionName}.crt" |
$KeyTool -import -noprompt -alias "${aliasName}" \
-keystore "$TrustStore" \
-trustcacerts \
-storepass "$Password" > /dev/null || exit 1
Maybe you can remove null redirection temporarily and check if you see any
errors in the output. Or just run those lines outside of the script:
openssl x509 -in ca.ctambrea-pc.itcnetworks.ro.crt | \
keytool -import -noprompt -alias bongo \
-keystore bongo.jks -trustcacerts -storepass 1234567
D.
BTW:
On my system:
$ openssl version
OpenSSL 0.9.8g 19 Oct 2007
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/
