Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Get certificate from CA (or create self-signed certificate and proceed with step 2)
    1. Select one of Certificate Providers that will suits you requirements. For instance SSL.com, Namecheap, TheSSLStore, GoDaddy, GlobalSign, DigiCert, Thawte, GeoTrust, Entrust, Network Solutions, etc...
    2. Create a CSR (Certificate Signing Request) either using a Linux shell (PBX shell preferred) or Certificate Provider tools.

      Code Block
      languagebash
      titleLinux shell command to create CSR
      openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

      CSR configuration require the details as follows below:

      • Common Name (the domain name of PBX). It is highly recommended to use sub-domain wildcard for it ( *.<yourdomain>.<com> )
      • Country (two-letter code)
      • State (or province)
      • Locality (or city)
      • Organization
      • Organizational Unit (Department)
      • E-mail address


    3. Info
      titleKeep resulting key and csr files with headers and including:

      -----BEGIN CERTIFICATE REQUEST-----

      ...

      -----END CERTIFICATE REQUEST-----

      and

      -----BEGIN PRIVATE KEY-----

      ....

      -----END PRIVATE KEY-----


    4. Order a certificate from one of Certificate Providers and provide them CSR file

...