kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-09-18 18:58:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

ast_tls_cert: Make certificate validity configurable.

Browse Source 
Currently, the ast_tls_cert script is hardcoded to produce certificates
with a validity of 365 days, which is not generally desirable for self-
signed certificates. Make this parameter configurable.

Resolves: #1307
(cherry picked from commit 393e51495c)
This commit is contained in:
Naveen Albert
2025-07-16 09:06:35 -04:00
committed by Asterisk Development Team
parent cf7188e49c
commit 33447d1268
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
contrib/scripts/ast_tls_cert
View File

@@ -4,6 +4,7 @@ DEFAULT_CA_CN="Asterisk Private CA"
DEFAULT_CLIENT_CN="asterisk" DEFAULT_CLIENT_CN="asterisk"
DEFAULT_SERVER_CN=`hostname -f` DEFAULT_SERVER_CN=`hostname -f`
CA_ENCRYPTION_OPT="-des3" CA_ENCRYPTION_OPT="-des3"
VALIDITY_DAYS=365
# arguments # arguments
# $1 "ca" if we are to generate a CA cert # $1 "ca" if we are to generate a CA cert
@@ -39,7 +40,7 @@ create_ca () {
exit 1 exit 1
fi fi
echo "Creating CA certificate ${CACERT}" echo "Creating CA certificate ${CACERT}"
openssl req -new -config ${CACFG} -x509 -days 365 -key ${CAKEY} -out ${CACERT} > /dev/null openssl req -new -config ${CACFG} -x509 -days ${VALIDITY_DAYS} -key ${CAKEY} -out ${CACERT} > /dev/null
if [ $? -ne 0 ]; if [ $? -ne 0 ];
then then
echo "Failed" echo "Failed"
@@ -64,7 +65,7 @@ create_cert () {
exit 1 exit 1
fi fi
echo "Creating certificate ${base}.crt" echo "Creating certificate ${base}.crt"
openssl x509 -req -days 365 -in ${base}.csr -CA ${CACERT} -CAkey ${CAKEY} -set_serial 01 -out ${base}.crt > /dev/null openssl x509 -req -days ${VALIDITY_DAYS} -in ${base}.csr -CA ${CACERT} -CAkey ${CAKEY} -set_serial 01 -out ${base}.crt > /dev/null
if [ $? -ne 0 ]; if [ $? -ne 0 ];
then then
echo "Failed" echo "Failed"
@@ -98,6 +99,7 @@ OPTIONS:
An informational string (company name) An informational string (company name)
-o Output filename base (defaults to asterisk) -o Output filename base (defaults to asterisk)
-d Output directory (defaults to the current directory) -d Output directory (defaults to the current directory)
-v CA/certificate validity in days (defaults to 365)
Example: Example:
@@ -131,7 +133,7 @@ OUTPUT_BASE=asterisk # Our default cert basename
CERT_MODE=server CERT_MODE=server
ORG_NAME=${DEFAULT_ORG} ORG_NAME=${DEFAULT_ORG}
while getopts "hf:c:ek:o:d:m:C:O:b:" OPTION while getopts "hf:c:ek:o:d:m:C:O:b:v:" OPTION
do do
case ${OPTION} in case ${OPTION} in
h) h)
@@ -153,6 +155,9 @@ do
b) b)
KEYBITS=${OPTARG} KEYBITS=${OPTARG}
;; ;;
v)
VALIDITY_DAYS=${OPTARG}
;;
o) o)
OUTPUT_BASE=${OPTARG} OUTPUT_BASE=${OPTARG}
;; ;;