Toolpack:Certificates - Revision history

Luc Morissette: Updated des3 (not secure) to aes256

2020-02-11T02:30:07Z

Updated des3 (not secure) to aes256

Luc Morissette: Updated MY_PRIVATE_KEY.key to MY_PRIVATE_KEY.pem

2019-11-27T15:31:53Z

Updated MY_PRIVATE_KEY.key to MY_PRIVATE_KEY.pem

Luc Morissette: Revised for FreeSBC vs ProSBC

2019-11-27T15:12:51Z

Revised for FreeSBC vs ProSBC

Allyntree: changed passphrase to pass phrase to match openssl

2019-03-15T14:39:37Z

changed passphrase to pass phrase to match openssl

Allyntree: /* View a certificate signing request (CSR) */

2019-03-15T13:54:16Z

View a certificate signing request (CSR)

Allyntree: Minor edit

2019-03-15T13:53:08Z

Minor edit

Allyntree: /* Create a CSR (certificate signing request) from a private key */

2019-03-15T13:52:27Z

Create a CSR (certificate signing request) from a private key

Allyntree: Minor edit

2019-03-15T13:51:39Z

Minor edit

Allyntree: /* Installing a custom private key and local certificate on FreeSBC */

2019-03-15T13:49:45Z

Installing a custom private key and local certificate on FreeSBC

Abrassard at 15:05, 14 March 2019

2019-03-14T15:05:12Z

@@ Line 9: / Line 9: @@
 === Create new private key ===
-   openssl genrsa -des3 -out MY_PRIVATE_KEY.pem 2048
+   openssl genrsa -aes256 -out MY_PRIVATE_KEY.pem 2048
 You will be prompted to enter a pass phrase:

@@ Line 20: / Line 20: @@
 Resulting file:
-   -rw-r--r-- 1 root root 1704 Mar 14 09:15 MY_PRIVATE_KEY.key
+   -rw-r--r-- 1 root root 1704 Mar 14 09:15 MY_PRIVATE_KEY.pem
 === Create a self-signed certificate from a private key ===
-   openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout MY_PRIVATE_KEY.key -out MY_CERTIFICATE.crt
+   openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout MY_PRIVATE_KEY.pem -out MY_CERTIFICATE.crt
 You will be prompted to answer questions regarding the certificate:
@@ Line 29: / Line 29: @@
    .........................................................+++
    ........................................................................................................................................................................................+++
-   writing new private key to 'MY_PRIVATE_KEY.key'
+   writing new private key to 'MY_PRIVATE_KEY.pem'
    -----
    You are about to be asked to enter information that will be incorporated
@@ Line 51: / Line 51: @@
 === Create a CSR (certificate signing request) from a private key ===
-   openssl req -key MY_PRIVATE_KEY.key -new -out MY_CSR.csr
+   openssl req -key MY_PRIVATE_KEY.pem -new -out MY_CSR.csr
 You will be prompted to answer questions regarding the certificate:
    You are about to be asked to enter information that will be incorporated
@@ Line 193: / Line 193: @@
 === Check that a certificate and a CSR match the private key ===
    openssl x509 -noout -modulus -in MY_CERTIFICATE.crt | openssl md5
-   openssl rsa -noout -modulus -in MY_PRIVATE_KEY.key | openssl md5
+   openssl rsa -noout -modulus -in MY_PRIVATE_KEY.pem | openssl md5
    openssl req -noout -modulus -in MY_CSR.csr | openssl md5
 All 3 commands should display the same MD5 hash:
    (stdin)= 41c46eddc15580673fe4adb8f5255634

@@ Line 1: / Line 1: @@
-This page provides useful shell commands and instructions to create and manipulate certificates with FreeSBC.
+This page provides useful shell commands and instructions to create and manipulate certificates with ProSBC.
-== Installing a custom private key and local certificate on FreeSBC ==
+== Installing a custom private key and local certificate on ProSBC ==
 [[Create_A_SIP_Certificate_A#Upload_local_certificates_.28optional.29|See WEB Portal configuration documentation]]
-== Use FreeSBC (or Linux) shell to manipulate certificates ==
+== Use ProSBC (or Linux) shell to manipulate certificates ==
-You can use FreeSBC's shell (or most Linux hosts' shell as long as OpenSSL is installed) to create and view private keys, certificates and CSRs (certificate signing requests).
+You can use ProSBC's shell (or most Linux hosts' shell as long as OpenSSL is installed) to create and view private keys, certificates and CSRs (certificate signing requests).
 === Create new private key ===
@@ Line 43: / Line 43: @@
    Organization Name (eg, company) [Default Company Ltd]:TelcoBridges
    Organizational Unit Name (eg, section) []:
-   Common Name (eg, your name or your server's hostname) []:MyFreeSBC
+   Common Name (eg, your name or your server's hostname) []:MySBC
    Email Address []:support@telcobridges.com
@@ Line 65: / Line 65: @@
    Organization Name (eg, company) [Default Company Ltd]:TelcoBridges
    Organizational Unit Name (eg, section) []:
-   Common Name (eg, your name or your server's hostname) []:MyFreeSBC
+   Common Name (eg, your name or your server's hostname) []:MySBC
    Email Address []:support@telcobridges.com
@@ Line 86: / Line 86: @@
                f3:fc:c5:72:ea:a9:50:a6
        Signature Algorithm: sha256WithRSAEncryption
-           Issuer: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MyFreeSBC/emailAddress=support@telcobridges.com
+           Issuer: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MySBC/emailAddress=support@telcobridges.com
            Validity
                Not Before: Mar 14 13:15:53 2019 GMT
                Not After : Mar 13 13:15:53 2020 GMT
-           Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MyFreeSBC/emailAddress=support@telcobridges.com
+           Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MySBC/emailAddress=support@telcobridges.com
            Subject Public Key Info:
                Public Key Algorithm: rsaEncryption
@@ Line 147: / Line 147: @@
        Data:
            Version: 0 (0x0)
-           Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MyFreeSBC/emailAddress=support@telcobridges.com
+           Subject: C=CA, ST=Quebec, L=Boucherville, O=TelcoBridges, CN=MySBC/emailAddress=support@telcobridges.com
            Subject Public Key Info:
                Public Key Algorithm: rsaEncryption

@@ Line 11: / Line 11: @@
    openssl genrsa -des3 -out MY_PRIVATE_KEY.pem 2048
-You will be prompted to enter a passphrase:
+You will be prompted to enter a pass phrase:
    Generating RSA private key, 2048 bit long modulus
    .....................+++

@@ Line 139: / Line 139: @@
             e6:01:6b:10
-=== View a certificate signing request (CSR) ===
+=== View the signing request of a certificate (CSR) ===
    openssl req -text -noout -verify -in MY_CSR.csr
@@ Line 190: / Line 190: @@
 :9d:b9:fb:aa:60:e2:48:8f:9b:6b:fb:69:2f:a5:7c:94:5a:
 :4d:a6:d1
-−
 === Check that a certificate and a CSR match the private key ===
    openssl x509 -noout -modulus -in MY_CERTIFICATE.crt | openssl md5

@@ Line 76: / Line 76: @@
    -rw-r--r-- 1 root root 1127 Mar 14 09:20 MY_CSR.csr
-=== View a certificate contents ===
+=== View the contents of the certificate ===
    openssl x509 -noout -text -in MY_CERTIFICATE.crt
@@ Line 138: / Line 138: @@
 d:a6:2e:1b:eb:d7:b9:f1:a2:ad:7a:42:37:81:63:02:ac:3b:
             e6:01:6b:10
 === View a certificate signing request (CSR) ===

← Older revision		Revision as of 15:05, 14 March 2019
Line 3:		Line 3:
	== Installing a custom private key and local certificate on FreeSBC ==		== Installing a custom private key and local certificate on FreeSBC ==

−	[[~~Toolpack:Tsbc_TLS_Profiles~~#Upload_local_certificates_.28optional.29\|See documentation here]]	+	[[Create_A_SIP_Certificate_A#Upload_local_certificates_.28optional.29\|See documentation here]]