Discussion:
Updating certs of HA system
Jan Fricke
2012-05-11 10:51:15 UTC
Permalink
Hi,

we have some systems where certificates will expire soon.

For Non-HA systems creating and installing new certs is very easy.

Generate new certificates: bin/ssl-cert/gen-ssl-keys.sh

Install certificates: bin/ssl-cert/install-cert.sh



But what do I need to do on HA systems?



I think for the master it’s the same like in a none HA system. But how do I
refresh certs on slave? Just send server profile after I installed new
certs on master?

gen-ssl-keys.sh and install-cert.sh on all slaves?



Do these procedures work on all systems >= 4.0 (4.0.4, 4.2.1, 4.4)?



Sincerely



Jan



_____________________________
Jan Fricke (B.Sc.)

*IANT -
APPLIED NGN-TECHNOLOGIES

**Turn-Key VoIP/UC Solutions and More...


*Fon: +49 (5331) 6794 0
Fax: +49 (5331) 6794 499
Mail: ***@iant.de
Web: www.iant.de <http://www.iant.de/en/startseite>


IANT is eZuce <http://www.ezuce.com/> Elite Partner for EMEA

IANT is Member of GROUPLINK <http://www.grouplink.de/>
Melcon Moraes
2012-10-29 11:28:01 UTC
Permalink
Any updates on this, Jan?

I was wondering too on how to update certs on a distributed scenario.

-
MM
Post by Jan Fricke
Hi,
we have some systems where certificates will expire soon.
For Non-HA systems creating and installing new certs is very easy.
Generate new certificates: bin/ssl-cert/gen-ssl-keys.sh
Install certificates: bin/ssl-cert/install-cert.sh
But what do I need to do on HA systems?
I think for the master it’s the same like in a none HA system. But how do
I refresh certs on slave? Just send server profile after I installed new
certs on master?
gen-ssl-keys.sh and install-cert.sh on all slaves?
Do these procedures work on all systems >= 4.0 (4.0.4, 4.2.1, 4.4)?
Sincerely
Jan
_____________________________
Jan Fricke (B.Sc.)
*IANT -
APPLIED NGN-TECHNOLOGIES
**Turn-Key VoIP/UC Solutions and More...
*Fon: +49 (5331) 6794 0
Fax: +49 (5331) 6794 499
Web: www.iant.de <http://www.iant.de/en/startseite>
IANT is eZuce <http://www.ezuce.com/> Elite Partner for EMEA
IANT is Member of GROUPLINK <http://www.grouplink.de/>
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/
Loading...