These are the exact steps I used to load the AD SSL cert on my last machine.
mkdir $HOME/sslkeys cd $HOME/sslkeys /usr/bin/ssl-cert/gen-ssl-keys.sh --csr Country Name (2 letter code) [] : US State or Province Name (full name) [] : Tennessee Locality Name (eg, city) [] : Nashville Organization Name (eg, company) [] : DSI Organization Unit Name (eg, section) [VoIP Services] : http://nshpwis7/certsrv/ cat pbx.fl215.sipx.voip.csr Submit, and download as DER openssl x509 -in pbx.fl215.sipx.voip.cer -inform DER -out pbx.fl215.sipx.voip.crt -outform PEM mkdir /etc/sipxpbx/ssl/old cp -r /etc/sipxpbx/ssl/* /etc/sipxpbx/ssl/old/ cp pbx.fl215.sipx.voip.crt /etc/sipxpbx/ssl/ssl-web.crt cp pbx.fl215.sipx.voip.key /etc/sipxpbx/ssl/ssl-web.key cp pbx.fl215.sipx.voip.crt /etc/sipxpbx/ssl/ssl.crt cp pbx.fl215.sipx.voip.key /etc/sipxpbx/ssl/ssl.key rm /etc/sipxpbx/ssl/ssl.keystore rm /etc/sipxpbx/ssl/ssl-web.keystore cp nshpwis7CA.crt /etc/sipxpbx/ssl/authorities /usr/bin/ssl-cert/ca_rehash On 4/24/2011 11:07 PM, Nathaniel Watkins wrote: > I was able to get a wildcard from godaddy installed once (all from the GUI) - > I think it only took 15 attempts and about 40 expletives... > > If you have something written up that an idiot can follow... point this idiot > to the right place > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Matthew Kitchin > (usenet/public) > Sent: Sunday, April 24, 2011 11:52 PM > To: Discussion list for users of sipXecs software > Subject: Re: [sipx-users] any wildcard ssl issues on 4.4 > > I've got the specifics for loading certs using command line and file copies > if that would help at all. I use internal microsoft AD CA and I have never > been able to load them through the GUI with any version of sipx. > > > This message and any files transmitted with it are intended only for the > individual(s) or entity named. If you are not the intended individual(s) or > entity named you are hereby notified that any disclosure, copying, > distribution or reliance upon its contents is strictly prohibited. If you > have received this in error, please notify the sender, delete the original, > and destroy all copies. Email transmissions cannot be guaranteed to be secure > or error-free as information could be intercepted, corrupted, lost, > destroyed, arrive late or incomplete, or contain viruses. Garrett County > Government therefore does not accept any liability for any errors or > omissions in the contents of this message, which arise as a result of email > transmission. > > > Garrett County Government, > 203 South Fourth Street, Courthouse, Oakland, Maryland 21550 > www.garrettcounty.org _______________________________________________ sipx-users mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-users/
