summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDavid Troy <dave@popvox.com>2006-04-02 17:49:37 +0000
committerDavid Troy <dave@popvox.com>2006-04-02 17:49:37 +0000
commit1392b8dc7fe62e7c875eb01a70d0b88b030af855 (patch)
treeb48fd876b0ce182a7010b5a7b3e6bb29702b5658
parent273e500c262b84c8cd9a2249ba8955e6f3ff8c74 (diff)
downloadastmanproxy-1392b8dc7fe62e7c875eb01a70d0b88b030af855.tar.gz
astmanproxy-1392b8dc7fe62e7c875eb01a70d0b88b030af855.tar.xz
astmanproxy-1392b8dc7fe62e7c875eb01a70d0b88b030af855.zip
git-svn-id: http://svncommunity.digium.com/svn/astmanproxy/branches/1.20pre@60 f02b47b9-160a-0410-81a6-dc3441afb0ec
-rw-r--r--Makefile18
-rw-r--r--astmanproxy.conf2
2 files changed, 19 insertions, 1 deletions
diff --git a/Makefile b/Makefile
index 37da0d4..10bfe74 100644
--- a/Makefile
+++ b/Makefile
@@ -76,6 +76,24 @@ $(OBJS): %.o: %.c
$(SOBJS): %.so: %.o
$(CC) $(SOLINK) $< -o $@
+SERIAL=0
+
+cert:
+ if [ ! -f /var/lib/asterisk/certs/proxy-server.pem ]; then \
+ umask 77 ; \
+ PEM1=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
+ PEM2=`/bin/mktemp /tmp/openssl.XXXXXX` ; \
+ sudo cp ./ssl.conf /etc/asterisk/ssl.conf; \
+ /usr/bin/openssl req $(UTF8) -newkey rsa:1024 -keyout $$PEM1 -nodes -x509 -days 365 -out $$PEM2 -set_serial $(SERIAL) -config /etc/asterisk/ssl.conf ; \
+ cat $$PEM1 > $@ ; \
+ echo "" >> $@ ; \
+ cat $$PEM2 >> $@ ; \
+ cat $@ > proxy-server.pem ;\
+ sudo mkdir -p /var/lib/asterisk/certs; \
+ sudo mv $@ /var/lib/asterisk/certs/proxy-server.pem; \
+ $(RM) $$PEM1 $$PEM2 $@; \
+ fi
+
install: uninstall all
install -d $(BINDIR)
install astmanproxy $(BINDIR)
diff --git a/astmanproxy.conf b/astmanproxy.conf
index 95db4e6..3a017ac 100644
--- a/astmanproxy.conf
+++ b/astmanproxy.conf
@@ -37,7 +37,7 @@ asteriskwritetimeout=100
clientwritetimeout=200
; Our server-side SSL certificate; what we use when answering clients
-certfile = /var/lib/asterisk/certs/proxy.pem
+certfile = /var/lib/asterisk/certs/proxy-server.pem
; Address for proxy to listen on, can be set to * or x.x.x.x format
; recommend that you listen only on 127.0.0.1 or on an interface that