Yes, downloading from GIT does create the TLS files correctly. On 25 June 2015 at 13:45, Bogdan-Andrei Iancu <[email protected]> wrote:
> Try to grab 2.1 from the GIT repo and let me know if that works for you. > > Regards, > > Bogdan-Andrei Iancu > OpenSIPS Founder and Developerhttp://www.opensips-solutions.com > > On 25.06.2015 14:05, Nabeel wrote: > > I did not download the sources from git; I downloaded directly from the > OpenSIPS website from this link: > http://opensips.org/pub/opensips/latest/src/ > > If git is more reliable, the download links should peehaps point to the > git repositories. > > I am using CentOS 7, if that makes any difference. > On 25 Jun 2015 11:55, "Bogdan-Andrei Iancu" <[email protected]> wrote: > >> Hi, >> >> A fresh installation of 2.1 (sources from GIT) produces: >> >> $ ls -laR /tmp/opensips_test/etc/opensips/tls/ >> /tmp/opensips_test/etc/opensips/tls/: >> total 32 >> drwxrwxr-x 4 bogdan bogdan 4096 iun 25 13:29 . >> drwx------ 3 bogdan bogdan 4096 iun 25 13:29 .. >> -rw-r--r-- 1 bogdan bogdan 2049 iun 25 13:29 ca.conf >> -rw-r--r-- 1 bogdan bogdan 1048 iun 25 13:29 README >> -rw-r--r-- 1 bogdan bogdan 1127 iun 25 13:29 request.conf >> drwxrwxr-x 4 bogdan bogdan 4096 iun 25 13:30 rootCA >> drwxrwxr-x 2 bogdan bogdan 4096 iun 25 13:30 user >> -rw-r--r-- 1 bogdan bogdan 591 iun 25 13:29 user.conf >> >> /tmp/opensips_test/etc/opensips/tls/rootCA: >> total 28 >> drwxrwxr-x 4 bogdan bogdan 4096 iun 25 13:30 . >> drwxrwxr-x 4 bogdan bogdan 4096 iun 25 13:29 .. >> -rw-r--r-- 1 bogdan bogdan 1338 iun 25 13:29 cacert.pem >> drwxrwxr-x 2 bogdan bogdan 4096 iun 25 13:30 certs >> -rw-r--r-- 1 bogdan bogdan 135 iun 25 13:29 index.txt >> drwxrwxr-x 2 bogdan bogdan 4096 iun 25 13:30 private >> -rw-r--r-- 1 bogdan bogdan 3 iun 25 13:30 serial >> >> /tmp/opensips_test/etc/opensips/tls/rootCA/certs: >> total 12 >> drwxrwxr-x 2 bogdan bogdan 4096 iun 25 13:30 . >> drwxrwxr-x 4 bogdan bogdan 4096 iun 25 13:30 .. >> -rw-r--r-- 1 bogdan bogdan 3023 iun 25 13:30 01.pem >> >> /tmp/opensips_test/etc/opensips/tls/rootCA/private: >> total 12 >> drwxrwxr-x 2 bogdan bogdan 4096 iun 25 13:30 . >> drwxrwxr-x 4 bogdan bogdan 4096 iun 25 13:30 .. >> -rw-r--r-- 1 bogdan bogdan 1834 iun 25 13:30 cakey.pem >> >> /tmp/opensips_test/etc/opensips/tls/user: >> total 24 >> drwxrwxr-x 2 bogdan bogdan 4096 iun 25 13:30 . >> drwxrwxr-x 4 bogdan bogdan 4096 iun 25 13:29 .. >> -rw-r--r-- 1 bogdan bogdan 1338 iun 25 13:30 user-calist.pem >> -rw-r--r-- 1 bogdan bogdan 3023 iun 25 13:30 user-cert.pem >> -rw-r--r-- 1 bogdan bogdan 530 iun 25 13:30 user-cert_req.pem >> -rw-r--r-- 1 bogdan bogdan 526 iun 25 13:30 user-privkey.pem >> >> >> All the TLS files seems to be in place. For 2.1 there is no specific >> switch for TLS, it is by default present, there is not need for extra >> options or env variables. Just to "make install" >> >> Regards, >> >> Bogdan-Andrei Iancu >> OpenSIPS Founder and Developerhttp://www.opensips-solutions.com >> >> On 25.06.2015 03:03, Nabeel wrote: >> >> I just installed version 1.11.5 of OpenSIPS and this version does have >> all the TLS files included. I should have downloaded this version all >> along because version 2.1 clearly needs to be fixed. >> >> On 25 June 2015 at 00:36, Nabeel <[email protected]> wrote: >> >>> Where are the 'example' openssl certificates as mentioned in the link >>> above? In the source files folder, there is no /etc/tls folder, and there >>> are no example certificates in the [source]/examples folder either. >>> >>> On 25 June 2015 at 00:26, Nabeel <[email protected]> wrote: >>> >>>> I tried installing OpenSIPS two more times, once through the menuconfig >>>> interface with TLS enabled, and another time with "TLS=1 make install" >>>> command. Both times, the /etc/opensips/tls directory only has empty >>>> directories, with no files inside. The following directories are created >>>> with no files inside: >>>> >>>> [installdirectory]/etc/opensips/tls >>>> [installdirectory]/etc/opensips/tls/rootCA >>>> [installdirectory]/etc/opensips/tls/user >>>> [installdirectory]/etc/opensips/tls/rootCA/certs >>>> [installdirectory]/etc/opensips/tls/rootCA/private >>>> >>>> All these directories are empty? Is this normal? >>>> >>>> At the following link I see someone refer to an OpenSIPS source which >>>> has tls included "opensips-1.9.1-tls". Is this a specific source >>>> tarball with TLS enabled? Is there one for version 2.1? >>>> >>>> >>>> https://github.com/antonraharja/book-opensips-101/blob/master/content/3.2.%20SIP%20TLS%20Secure%20Calling.mediawiki >>>> >>>> >>>> >>>> On 24 June 2015 at 15:30, Bogdan-Andrei Iancu <[email protected]> >>>> wrote: >>>> >>>>> Hi, >>>>> >>>>> What OpenSIPS version do you have ? also, note that you need also to >>>>> install OpenSIPS with the TLS option on, otherwise the tls directory will >>>>> not be created. >>>>> >>>>> Regards, >>>>> >>>>> Bogdan-Andrei Iancu >>>>> OpenSIPS Founder and Developerhttp://www.opensips-solutions.com >>>>> >>>>> On 24.06.2015 17:14, Nabeel wrote: >>>>> >>>>> # opensipsctl tls rootCA >>>>> ERROR: root CA config file (/usr/local//etc/opensips//tls/ca.conf) >>>>> does not exist >>>>> >>>>> In fact, that whole tls directory is empty, even though my OpenSIPS >>>>> instance has been compiled with tls support. Where can I download the CA >>>>> files? >>>>> >>>>> >>>>> _______________________________________________ >>>>> Users mailing >>>>> [email protected]http://lists.opensips.org/cgi-bin/mailman/listinfo/users >>>>> >>>>> >>>>> >>>> >>> >> >> >
_______________________________________________ Users mailing list [email protected] http://lists.opensips.org/cgi-bin/mailman/listinfo/users
