4.6 regenerate keystores

Discussion:

Kyle Haefner

2012-11-07 20:16:32 UTC

Hi All,

Anyone know what the equivalent command of bin/ssl-cert/gen-ssl-keys.sh is
in 4.6?

I ran into a problem with importing a certificate and now I get the
following null pointer exception in sipxconfig, i'd like to blow it away
and start over.

java.lang.NullPointerException
at java.io.StringReader.<init>(StringReader.java:50)
at
org.sipfoundry.sipxconfig.cert.CertificateUtils.readCertificateKey(CertificateUtils.java:101)
at
org.sipfoundry.sipxconfig.cert.JavaKeyStore.addKey(JavaKeyStore.java:71)
at
org.sipfoundry.sipxconfig.cert.CertificateConfig.replicate(CertificateConfig.java:81)
at
org.sipfoundry.sipxconfig.cfgmgt.ConfigManagerImpl.runProviders(ConfigManagerImpl.java:158)
at
org.sipfoundry.sipxconfig.cfgmgt.ConfigManagerImpl.runProviders(ConfigManagerImpl.java:147)
at
org.sipfoundry.sipxconfig.setup.SetupMain.runSystemTask(SetupMain.java:26)
at
org.sipfoundry.sipxconfig.common.SystemTaskRunner.runMain(SystemTaskRunner.java:43)
at
org.sipfoundry.sipxconfig.common.SystemTaskRunner.main(SystemTaskRunner.java:27)
--
Kyle Haefner, M.S.
Communication Systems Programmer
Colorado State University
Fort Collins, CO
Phone: 970-491-1012
Email: ***@colostate.edu

01010010 01100101 01100001 01101100 00100000 01101101 01100101 01101110
00100000 01110000 01110010 01101111 01100111 01110010 01100001 01101101
00100000 01101001 01101110 00100000 01100010 01101001 01101110 01100001
01110010 01111001 00101110

Mircea Carasel

2012-11-07 20:59:01 UTC

Permalink

Post by Kyle Haefner
Hi All,
Anyone know what the equivalent command of bin/ssl-cert/gen-ssl-keys.sh
is in 4.6?
I ran into a problem with importing a certificate and now I get the
following null pointer exception in sipxconfig, i'd like to blow it away
and start over.
java.lang.NullPointerException
at java.io.StringReader.<init>(StringReader.java:50)
at
org.sipfoundry.sipxconfig.cert.CertificateUtils.readCertificateKey(CertificateUtils.java:101)
at
org.sipfoundry.sipxconfig.cert.JavaKeyStore.addKey(JavaKeyStore.java:71)
at
org.sipfoundry.sipxconfig.cert.CertificateConfig.replicate(CertificateConfig.java:81)
at
org.sipfoundry.sipxconfig.cfgmgt.ConfigManagerImpl.runProviders(ConfigManagerImpl.java:158)
at
org.sipfoundry.sipxconfig.cfgmgt.ConfigManagerImpl.runProviders(ConfigManagerImpl.java:147)
at
org.sipfoundry.sipxconfig.setup.SetupMain.runSystemTask(SetupMain.java:26)
at
org.sipfoundry.sipxconfig.common.SystemTaskRunner.runMain(SystemTaskRunner.java:43)
at
org.sipfoundry.sipxconfig.common.SystemTaskRunner.main(SystemTaskRunner.java:27)

Hi,
So you used the Certificate page and tried to import a new certificate into
the system. Is it about web certificate, or certificate authority?

What steps did you follow and run into that error?
The certificate management has been changed in 4.6 and some scripts were
removed. We now keep certificates in apache and not in jetty as we used to
do in 4.4 (ssl listener has been removed from jetty)
Certificates and CA reside here: /etc/httpd/conf.d/ssl

Mircea

Post by Kyle Haefner
--
Kyle Haefner, M.S.
Communication Systems Programmer
Colorado State University
Fort Collins, CO
Phone: 970-491-1012
01010010 01100101 01100001 01101100 00100000 01101101 01100101 01101110
00100000 01110000 01110010 01101111 01100111 01110010 01100001 01101101
00100000 01101001 01101110 00100000 01100010 01101001 01101110 01100001
01110010 01111001 00101110
_______________________________________________
sipx-users mailing list
List Archive: http://list.sipfoundry.org/archive/sipx-users/

Kyle Haefner

2012-11-07 22:53:33 UTC

Permalink

Hi Mercea,

I was importing our LDAP certificate, and I and I think I was trying it
under the web-cert (this is the page the certificate link on the LDAP
settings brought me to). This seemed to have crashed sipxconfig and I
never got it back. I'll look in the /etc/httpd/conf.d/ssl and see if I can
delete it.

Kyle

Post by Mircea Carasel

Hi,
So you used the Certificate page and tried to import a new certificate
into the system. Is it about web certificate, or certificate authority?
What steps did you follow and run into that error?
The certificate management has been changed in 4.6 and some scripts were
removed. We now keep certificates in apache and not in jetty as we used to
do in 4.4 (ssl listener has been removed from jetty)
Certificates and CA reside here: /etc/httpd/conf.d/ssl
Mircea

--
Kyle Haefner, M.S.
Communication Systems Programmer
Colorado State University
Fort Collins, CO
Phone: 970-491-1012
Email: ***@colostate.edu

01010010 01100101 01100001 01101100 00100000 01101101 01100101 01101110
00100000 01110000 01110010 01101111 01100111 01110010 01100001 01101101
00100000 01101001 01101110 00100000 01100010 01101001 01101110 01100001
01110010 01111001 00101110

Mircea Carasel

2012-11-08 07:39:33 UTC

Permalink

Post by Kyle Haefner
Hi Mercea,
I was importing our LDAP certificate, and I and I think I was trying it
under the web-cert (this is the page the certificate link on the LDAP
settings brought me to). This seemed to have crashed sipxconfig and I
never got it back. I'll look in the /etc/httpd/conf.d/ssl and see if I
can delete it.
For LDAP you have to go to Authorities section and import the LDAP CA

there. You need the LDAP authority to be imported in openuc, and not the
LDAP certificate... I recently tested LDAP SSL configuration in 4.6 and
worked for me. However worth investigating the exception you encountered, I
will have a look and follow the steps you did to try to reproduce the
exception and come back with more results
Mircea