Damian Krzeminski wrote:
Tambrea Cosmin wrote:
Damian Krzeminski wrote:
Scott Lawrence wrote:
On Mon, 2009-08-03 at 10:41 -0400, Damian Krzeminski wrote:
Anybody knows who/what is supposed to generate authorities.jks?
It is generated by the install-cert.sh script, which is normally
executed by the sipxexs-setup{,-system} scripts.
I just tried that and it seems to work.
I cleaned my entire etc/sipxecs/ssl directory then ran 'sipxecs-setup'
After (doto.lan is my SIP domain):
find ssl
ssl
ssl/.ssl.keystore
ssl/authorities.jks
ssl/.ssl.keystore-contents.md5
ssl/ssl.keystore
ssl/ssl-web.keystore
ssl/ssl.crt
ssl/ssl.key
ssl/ssl.p12
ssl/authorities
ssl/authorities/ca.doto.lan.crt
ssl/authorities/e2290099.0
ssl/.ssl.p12
ssl/.authorities.jks
ssl/ssl-web.p12
ssl/ssl-web.crt
ssl/ssl-web.key
ssl/.authorities-contents.md5
#java -version
java version "1.6.0_0"
OpenJDK Runtime Environment (IcedTea6 1.5) (fedora-20.b16.fc10-i386)
OpenJDK Server VM (build 14.0-b15, mixed mode)
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/
Here is my ssl folder content:
*$find ssl*
ssl
ssl/authorities
ssl/authorities/03856d91.0
ssl/authorities/ca.ctambrea-pc.itcnetworks.ro.crt
ssl/ssl-web.key
ssl/ssl-web.crt
ssl/ssl.key
ssl/ssl.p12
ssl/ssl-web.p12
ssl/ssl.crt
ssl/ssl.keystore
ssl/ssl-web.keystore
Looking at your files list, it's obvious that some files are not
generated on my sipx:
ssl/authorities.jks
ssl/.ssl.keystore-contents.md5
ssl/ssl.keystore
ssl/.ssl.p12
ssl/.authorities.jks
ssl/.authorities-contents.md5
I have the same java version installed on my system:
*$java -version*
java version "1.6.0_0"
OpenJDK Runtime Environment (IcedTea6 1.5) (fedora-20.b16.fc10-i386)
OpenJDK Server VM (build 14.0-b15, mixed mode)
*$javac -version*
javac 1.6.0_0
Maybe you can try running bin/ssl-cert/gen-ssl-keys.sh (in an empty
directory) and see if it creates truststore.
It looks like authorities.jks is created in line 756:
${openssl} x509 -in "${serverName}${restrictionName}.crt" |
$KeyTool -import -noprompt -alias "${aliasName}" \
-keystore "$TrustStore" \
-trustcacerts \
-storepass "$Password" > /dev/null || exit 1
Maybe you can remove null redirection temporarily and check if you see any
errors in the output. Or just run those lines outside of the script:
openssl x509 -in ca.ctambrea-pc.itcnetworks.ro.crt | \
keytool -import -noprompt -alias bongo \
-keystore bongo.jks -trustcacerts -storepass 1234567
D.
BTW:
On my system:
$ openssl version
OpenSSL 0.9.8g 19 Oct 2007
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/
I finally succeeded to solve the file replication error.
The solution was very simple: I set up my java environment variable
JAVA_HOME, which was not set(you can see your variable value using echo
$JAVA_HOME, and set it using export
JAVA_HOME=<your_java_installation_folder>).
I also set up SIPX_JAVA_HOME.
After that, I ran sipxecs-setup.sh and the file authorities.jks was
generated.
I have laso tested this issue on a system (which had the same problem )
with java-sun jdk installed and setting these environment variables
solved this issue.
I hope this is helpful.
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/
