[asterisk-users] TLS Manager

[John A. Sullivan III]

After some testing and false starts, it looks like PKCS#12 does not work
but simple concatenation does.  Thanks - John

On Mon, 2009-07-27 at 06:38 -0400, John A. Sullivan III wrote:
> Thank you although that seems a bit strange.  Does one simply
> concatenate them together or is it really looking for a PKCS#12 file?
> Thanks - John
> 
> On Sun, 2009-07-26 at 10:03 -0700, Eric Chamberlain wrote:
> > The pem file should contain both the private key and the certificate.
> > 
> > 
> > On Jul 24, 2009, at 4:08 PM, John A. Sullivan III wrote:
> > 
> > > Hello, all.  After many pages of googling and testing in the lab, I'm
> > > still a bit perplexed about how to implement tls protection for the
> > > asterisk manager.  manager.conf allows one to specify the cert file  
> > > but
> > > one normally must also specify the private key file.  If I simply  
> > > enter
> > > the cert file:
> > >
> > > sslenable=yes
> > > sslbindport=5038
> > > sslbindaddr=172.x.x.8
> > > sslcert=/etc/pki/tls/certs/pbxc.pem  ; path to the certificate.
> > > ;   sslcipher=<cipher string>
> > >
> > > It errors as I expect it would:
> > >
> > > pbx*CLI> manager reload
> > >  == Parsing '/etc/asterisk/manager.conf':   == Found
> > > SSL cert error </etc/pki/tls/certs/pbxc.pem>
> > >
> > > How does one specify the private key for the manager.conf file?  
> > > Thanks -
> > > John
> > > -- 
> > > John A. Sullivan III
> > > Open Source Development Corporation
> > > +1 207-985-7880
> > > jsullivan at opensourcedevel.com
> > >
> > > http://www.spiritualoutreach.com
> > > Making Christianity intelligible to secular society
> > >
> > >
> > > _______________________________________________
> > > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > >
> > > asterisk-users mailing list
> > > To UNSUBSCRIBE or update options visit:
> > >   http://lists.digium.com/mailman/listinfo/asterisk-users
> > 
> > 
> > _______________________________________________
> > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > 
> > asterisk-users mailing list
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-users
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan at opensourcedevel.com

http://www.spiritualoutreach.com
Making Christianity intelligible to secular society