SSL Certificates

In sipXecs 4.0 or higher certificates can be installed via sipXconfig. (in System -> Web Certificates) This page allows the administrator to generate a Certificate Signing Request (CSR) and import a certificate. The certificate can be imported from text or from a certificate file. The certificate file must be in a 'PEM' format (a base64 text encoding). If the certificate file is done in a "DER" format (a binary encoding) this can be converted to the proper format from the linux command line by:

Next we need a valid SSL certificate. The following script generates a self-signed certificate. This is the easiest way and for most applications secure enough. If you want a certificate provided by a Certificate Authority you can go to many well known Certificate Authorities such as Geotrust.
{{Box Code|Generate valid SSL certificate|

gen-ssl-keys.sh

will prompt for you for input including:

1. CA Common Name (DNS name for CA): Enter anything but NOT the DNS name of your server''
2. SIP domain name: The domain name of your installation''
3. Full DNS name for the server: Enter fully qualified hostname of your sipX server''

}}