Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
ASTGENKEY(8)		   Linux Programmer's Manual		  ASTGENKEY(8)

NAME
       astgenkey - generates keys for for Asterisk IAX2	RSA authentication

SYNOPSIS
       astgenkey [ -q ]	[ -n ] [ keyname ]

DESCRIPTION
       astgenkey  This	script generates an RSA	private	and public key pair in
       PEM format for use by Asterisk.	The private key	should be kept	a  se-
       cret,  as  it  can be used to fake your system's	identity.  Thus	by de-
       fault (without the option -n ) the script will create a	passphrase-en-
       crypted	copy  of  your secret key: without entering the	passphrase you
       won't be	able to	use it.

       However if you want to use such a key with  Asterisk,  you'll  have  to
       start  it  interactively, because the scripts that start	asterisk can't
       use that	encrypted key.

       The key is identified by	a name.	If you don't write  the	 name  on  the
       command-line you'll be prompted for one.	The outputs of the script are:

       name.pub
	      The public key: not secret. Send this to the other side.

       name.key
	      The private key: secret.

       Those files should be copied to /var/lib/asterisk/keys

       (The private key: on your system. The public key: on other systems)

       To see the currently-installed keys from	the asterisk CLI, use the com-
       mand

	      keys show

OPTIONS
       -q
	      Run quietly.

       -n
	      Don't encrypt the	private	key.

SECURITY
       The  keys are created, using the	umask of the user running the command.
       To create the keys in a secure manner, you should check to ensure  that
       your  umask  is first set to disallow the private key from being	world-
       readable, such as with the following commands:

       umask 0066

       astgenkey yourkey

       And then	make the key accessible	to Asterisk (assuming you  run	it  as
       user "asterisk").

	 chown asterisk	/var/lib/asterisk/keys/yourname.*

FILES
       /var/lib/asterisk/keys

SEE ALSO
       asterisk(8), genrsa(1), rsa(1),

       http://www.voip-info.org/wiki-Asterisk+iax+rsa+auth

AUTHOR
       This  manual  page  was	written	 by  Tzafrir Cohen <tzafrir.cohen@xor-
       com.com>	Permission is granted to copy, distribute and/or  modify  this
       document	 under	the terms of the GNU General Public License, Version 2
       any later version published by the Free Software	Foundation.

       On Debian systems, the complete text of the GNU General Public  License
       can be found in /usr/share/common-licenses/GPL-2.

Asterisk			May 14th, 2005			  ASTGENKEY(8)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=astgenkey&sektion=8&manpath=FreeBSD+Ports+14.3.quarterly>

home | help