<div dir="ltr"><div>Unfortunately, changing ownership did not solve the issue:<br></div><div><br></div><div># ls -al keys/</div>total 40<br>drwxr-xr-x 2 asterisk asterisk 4096 nov. 18 20:47 .<br>drwxr-x--- 3 asterisk asterisk 4096 nov. 18 20:53 ..<br>-rw------- 1 asterisk asterisk 1224 nov. 18 20:47 asterisk.crt<br>-rw------- 1 asterisk asterisk 578 nov. 18 20:46 asterisk.csr<br>-rw------- 1 asterisk asterisk 887 nov. 18 20:46 asterisk.key<br>-rw------- 1 asterisk asterisk 2111 nov. 18 20:47 asterisk.pem<br>-rw------- 1 asterisk asterisk 161 nov. 18 20:46 ca.cfg<br>-rw------- 1 asterisk asterisk 1781 nov. 18 20:46 ca.crt<br>-rw------- 1 asterisk asterisk 3311 nov. 18 20:46 ca.key<br><div>-rw------- 1 asterisk asterisk 124 nov. 18 20:46 tmp.cfg</div><div><br></div><div># service asterisk stop</div><div># service asterisk start</div><div># asterisk -rx "http show status"<br>HTTP Server Status:<br>Prefix: <br>Server: Asterisk/17.0.0<br>Server Enabled and Bound to <a href="http://0.0.0.0:8088">0.0.0.0:8088</a><br><br>Enabled URI's:<br>/httpstatus => Asterisk HTTP General Status<br>/static/... => Asterisk HTTP Static Delivery<br><br>Enabled Redirects:<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le lun. 18 nov. 2019 à 22:08, Richard Mudgett <<a href="mailto:rmudgett@digium.com">rmudgett@digium.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Nov 18, 2019 at 2:53 PM Olivier <<a href="mailto:oza.4h07@gmail.com" target="_blank">oza.4h07@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hello,</div><div><br></div><div>I've installed a new Asterisk 17.0.0 on a Debian Buster system.</div><div><br></div><div>This Asterisk instance is run by asterisk user (and group).</div><div>I've got:</div><div><br></div><div># ls -l /etc/asterisk<br>total 68<br>-rw-r--r-- 1 asterisk asterisk 501 nov. 18 19:12 asterisk.conf<br>-rw-r--r-- 1 asterisk asterisk 135 nov. 18 18:57 cdr.conf<br>-rw-r--r-- 1 asterisk asterisk 684 nov. 18 18:57 cdr_custom.conf<br>-rw-r--r-- 1 asterisk asterisk 103 nov. 18 18:57 confbridge.conf<br>-rw-r--r-- 1 asterisk asterisk 6834 nov. 18 18:57 extensions.conf<br>-rw-r--r-- 1 asterisk asterisk 138 nov. 18 21:42 http.conf<br>-rw-r--r-- 1 asterisk asterisk 681 nov. 18 18:57 indications.conf<br>drwxr-xr-x 2 root root 4096 nov. 18 20:47 keys<br>-rw-r--r-- 1 asterisk asterisk 160 nov. 18 18:57 logger.conf<br>-rw-r--r-- 1 asterisk asterisk 2769 nov. 18 18:57 modules.conf<br>-rw-r--r-- 1 asterisk asterisk 50 nov. 18 18:57 musiconhold.conf<br>-rw-r--r-- 1 asterisk asterisk 6360 nov. 18 18:57 pjsip.conf<br>-rw-r--r-- 1 asterisk asterisk 790 nov. 18 18:57 pjsip_notify.conf<br>-rw-r--r-- 1 asterisk asterisk 768 nov. 18 18:57 README<br>-rw-r--r-- 1 asterisk asterisk 513 nov. 18 18:57 voicemail.conf<br></div><div><br></div><div># ls -l /etc/asterisk/keys/<br>total 32<br>-rw------- 1 root root 1224 nov. 18 20:47 asterisk.crt<br>-rw------- 1 root root 578 nov. 18 20:46 asterisk.csr<br>-rw------- 1 root root 887 nov. 18 20:46 asterisk.key<br>-rw------- 1 root root 2111 nov. 18 20:47 asterisk.pem<br></div></div></blockquote><div><br></div><div>I'd say that asterisk running as the asterisk user has no permission to see the .pem file as only root can see it.</div><div><br></div><div>Richard<br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>-rw------- 1 root root 161 nov. 18 20:46 ca.cfg<br>-rw------- 1 root root 1781 nov. 18 20:46 ca.crt<br>-rw------- 1 root root 3311 nov. 18 20:46 ca.key<br>-rw------- 1 root root 124 nov. 18 20:46 tmp.cfg</div><div><br></div><div># cat /etc/asterisk/http.conf <br>[general]<br>enabled=yes<br>bindaddr=0.0.0.0<br>bindport=8088<br>tlsenable=yes<br>tlsbindaddr=<a href="http://0.0.0.0:8089" target="_blank">0.0.0.0:8089</a><br>tlscertfile=/etc/asterisk/keys/asterisk.pem</div><div><br></div><div>But, still I don't have any HTTPS server running:</div><div><br></div><div># asterisk -rx "http show status"<br>HTTP Server Status:<br>Prefix: <br>Server: Asterisk/17.0.0<br>Server Enabled and Bound to <a href="http://0.0.0.0:8088" target="_blank">0.0.0.0:8088</a><br><br>Enabled URI's:<br>/httpstatus => Asterisk HTTP General Status<br>/static/... => Asterisk HTTP Static Delivery<br><br>Enabled Redirects:<br> None.</div><div><br></div><div><br></div><div><br></div><div>Can someone help me on this ?</div><div>Is http;conf correct ?</div><div>Am I mis-configuring files access rights or ownership ?</div><div>Something else ?<br></div><div><br></div><div>Best regards<br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div>
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
Check out the new Asterisk community forum at: <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org/</a><br>
<br>
New to Asterisk? Start here:<br>
<a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wiki/display/AST/Getting+Started</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a></blockquote></div></div>
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
Check out the new Asterisk community forum at: <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org/</a><br>
<br>
New to Asterisk? Start here:<br>
<a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wiki/display/AST/Getting+Started</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a></blockquote></div>