Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
ASTGENKEY(8)		   Linux Programmer's Manual		  ASTGENKEY(8)

NAME
       astgenkey - generates keys for for Asterisk IAX2	RSA authentication

SYNOPSIS
       astgenkey [ -q ]	[ -n ] [ keyname ]

DESCRIPTION
       astgenkey  This	script generates an RSA	private	and public key pair in
       PEM format for use by Asterisk.	The private key	should be kept	a  se-
       cret,  as  it  can be used to fake your system's	identity.  Thus	by de-
       fault (without the option -n ) the script will create a	passphrase-en-
       crypted	copy  of  your secret key: without entering the	passphrase you
       won't be	able to	use it.

       However if you want to use such a key with  Asterisk,  you'll  have  to
       start  it  interactively, because the scripts that start	asterisk can't
       use that	encrypted key.

       The key is identified by	a name.	If you don't write  the	 name  on  the
       command-line you'll be prompted for one.	The outputs of the script are:

       name.pub
	      The public key: not secret. Send this to the other side.

       name.key
	      The private key: secret.

       Those files should be copied to /var/lib/asterisk/keys

       (The private key: on your system. The public key: on other systems)

       To see the currently-installed keys from	the asterisk CLI, use the com-
       mand

	      keys show

OPTIONS
       -q
	      Run quietly.

       -n
	      Don't encrypt the	private	key.

SECURITY
       The keys	are created, using the umask of	the user running the  command.
       To  create the keys in a	secure manner, you should check	to ensure that
       your umask is first set to disallow the private key from	 being	world-
       readable, such as with the following commands:

       umask 0066

       astgenkey yourkey

       And  then  make	the key	accessible to Asterisk (assuming you run it as
       user "asterisk").

	 chown asterisk	/var/lib/asterisk/keys/yourname.*

FILES
       /var/lib/asterisk/keys

SEE ALSO
       asterisk(8), genrsa(1), rsa(1),

       http://www.voip-info.org/wiki-Asterisk+iax+rsa+auth

AUTHOR
       This manual page	 was  written  by  Tzafrir  Cohen  <tzafrir.cohen@xor-
       com.com>	 Permission  is	granted	to copy, distribute and/or modify this
       document	under the terms	of the GNU General Public License,  Version  2
       any later version published by the Free Software	Foundation.

       On  Debian systems, the complete	text of	the GNU	General	Public License
       can be found in /usr/share/common-licenses/GPL-2.

Asterisk			May 14th, 2005			  ASTGENKEY(8)

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | SECURITY | FILES | SEE ALSO | AUTHOR

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=astgenkey&sektion=8&manpath=FreeBSD+12.1-RELEASE+and+Ports>

home | help