asterisk users - Jul 2019 - unsolved: Re: solved: how to create a working certificate for using TLS?

On 7/5/19 10:50 AM, Doug Lytle wrote:
> On 7/4/19 6:40 PM, hw wrote:
>> This has again, and for no reason, ceased to work again after 
>> restarting asterisk.  No matter what I try, I can't create a 
>> certificate asterisk
>> would verify.
> 
> Have you considered using LetsEncrypt for a valid certificate?
> 
> Doug
> 
> 
What would be the point in making this even more complicated?

Today all of a sudden the certificate couldn't be verified anymore even 
without restarting asterisk.  How is it possible that a certificate 
which was fine for 10 hours and 18 minutes suddenly can not be used anymore?

hw--

I see this kind of behavior when the certificate expires... you've probably
checked this, but sometimes we
miss little details like that.

murf

On Fri, Jul 5, 2019 at 1:14 PM hw <hw at gc-24.de> wrote:
> On 7/5/19 10:50 AM, Doug Lytle wrote:
> > On 7/4/19 6:40 PM, hw wrote:
> >> This has again, and for no reason, ceased to work again after
> >> restarting asterisk.  No matter what I try, I can't create a
> >> certificate asterisk
> >> would verify.
> >
> > Have you considered using LetsEncrypt for a valid certificate?
> >
> > Doug
> >
> >
>
> What would be the point in making this even more complicated?
>
> Today all of a sudden the certificate couldn't be verified anymore even
> without restarting asterisk.  How is it possible that a certificate
> which was fine for 10 hours and 18 minutes suddenly can not be used
> anymore?
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>       https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users


-- 

Steve Murphy
ParseTree Corporation
57 Lane 17
Cody, WY 82414
✉  murf at parsetree dot com
☎ 307-899-0510
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20190705/820472d0/attachment.html>

On 7/5/19 9:22 PM, Steve Murphy wrote:
> hw--
> 
> I see this kind of behavior when the certificate expires... you've 
> probably checked this, but sometimes we
> miss little details like that.
I thought about that and checked the configuration I've been using to
create the certificate, and I can't see anywhere that it would expire 
earlier than after 3650 days.  Is there another way to check this?

Which certificate is the one that can not be verified: the one I
created or the one used by the SIP provider?  How can I find out
which certificate the error message is referring to?