SSL Certificates

From SIPfoundry sipx, The Open Source SIP PBX for Linux - Calivia

Jump to: navigation, search

Next we need a valid SSL certificate. The following script generates a self-signed certificate. This is the easiest way and for most applications secure enough. If you want a certificate provided by a Certificate Authority you can go to many well known Certificate Authorities such as Geotrust.

Code: Generate valid SSL certificate
mkdir $HOME/sslkeys
cd $HOME/sslkeys
/usr/bin/ssl-cert/gen-ssl-keys.sh

gen-ssl-keys.sh will prompt for you for input including:

  1. CA Common Name (DNS name for CA): Enter anything but NOT the DNS name of your server
  2. SIP domain name: The domain name of your installation
  3. Full DNS name for the server: Enter fully qualified hostname of your sipX server
/usr/bin/ssl-cert/install-cert.sh
Personal tools