search for: ast_tls_cert

Hi List, I'm trying to set my Asterisk 1.8.20.1 with TLS on CentOS 5.9, it was easy and straightforward with Debian 6.0.6, but when I introduce this command on CentOS: #./ast_tls_cert -C 10.200.108.17 -O "MyCompany" -d /etc/asterisk/keys/ I got this error message: hostname: Unknown host Same result happens when using server's hostname: #./ast_tls_cert -C ast-centos -O "MyCompany" -d /etc/asterisk/keys/ Where 'ast-centos' is the result of '...

Hi list, is there an easy and proper way to revoke certificat created by the script ast_tls_cert? I always get a name error on the CN/ O/ subject ... -- Daniel

...ay/AST/Secure+Calling+Tutorial. and I use blink as a softphone in ny client in windows. for regular communication process (without TLS) smoothly, but when it just follow the tutorial, it is always error on his softphone: transport error. my configuration like this: certificate for the server : . /ast_tls_cert -C 10.4.71.27 -O "My Super Company" -d /etc/asterisk/keys certificate for Client 1 : . /ast_tls_cert -m client -c /etc/asterisk/keys/ca.crt -k /etc/asterisk/keys/ca.key -C 10.4.71.24 -O "My Super Company" -d /etc/ asterisk/keys -o 1001 certificate for Client 2 : . /ast_tls_cer...

Hello, Le lun. 6 janv. 2020 à 19:01, Olivier <oza.4h07 at gmail.com> a écrit : > May I add I could successfully (if pjsip show transports has any meaning) > add a PJSIP TLS-transport with: > > [transport-tls] > type=transport > protocol=tls > bind=0.0.0.0:5061 > cert_file=/etc/asterisk/keys/asterisk.crt > priv_key_file=/etc/asterisk/keys/asterisk.key >

Hi all, i have had sip TLS with an own signed certificate (using the ast_tls_cert script) running on asterisk-1.8.8 - i then have updated to 1.8.9.3 - and now i get the message "FILE * open failed!" I have already recreated the certificates with the script - but still no luck... Does anyone here know the source of the problem ? best regards, Wolfgang Pichler

Hello, After countless hours on, this I found the root cause of HTTPS settings on Debian Buster. All this came from ast_tls_cert script using 1024 bits-long keys where Debian's defaut was to require at least 2048-long keys ! Simply passing -b 2048 to ast_tls_cert solved it. 1. May I suggest mentioning explicitly this possibility in wiki page [1] ? 2. What would you say of adding an extra input argument to have certific...

Hi All, I'm on a middle of an asterisk installation/configuration for my company and I'm testing the TLS configuration. For this reason, I used the ast_tls_cert script to build the ssl certificates for my server. On sip.conf file: tlsenable=yes tlsbindaddr=0.0.0.0 tlscertfile=/etc/asterisk/keys/asterisk.pem tlscafile=/etc/asterisk/keys/ca.crt tlscipher=ALL tlsclientmethod=tlsv1 and on my extension number configuration: transport=tls Finally, my phone wa...

...sk 887 mrt 24 16:16 asterisk.key -r--r-----. 1 asterisk asterisk 2091 mrt 24 16:16 asterisk.pem -rw-r--r--. 1 asterisk asterisk 1736 mrt 24 16:16 ca.crt -r--------. 1 asterisk asterisk 3311 mrt 24 16:16 ca.key -rw-r--r--. 1 asterisk asterisk 1208 mrt 24 16:20 nexus.crt The certs were created with ast_tls_cert as described in the tutorial. I created a nexus.p12 for the phone and imported it before configuring CSipSimple. Does anyone know what's wrong? Pointers much appreciated. Thanks, Patrick [0] https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial

Hello I get the following error when using our Let's Encrypt ssl certificate for webRTC calls : [Jun 2 14:29:28] == DTLS ECDH initialized (secp256r1), faster PFS enabled [Jun 2 14:29:28] ERROR[27360][C-00000ae5]: res_rtp_asterisk.c:1441 ast_rtp_dtls_set_configuration: Specified certificate file '/etc/letsencrypt/live/ws.mydomain.tld/privkey.pem' for RTP instance