Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   44335 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

ASTGENKEY(8)		   Linux Programmer's Manual		  ASTGENKEY(8)

NAME
       astgenkey - generates keys for for Asterisk IAX2 RSA authentication

SYNOPSIS
       astgenkey [ -q ] [ -n ] [ keyname ]

DESCRIPTION
       astgenkey  This	script generates an RSA private and public key pair in
       PEM format for use by Asterisk.	The  private  key  should  be  kept  a
       secret,	as  it	can  be	 used to fake your system's identity.  Thus by
       default (without the option -n ) the script will create	a  passphrase-
       encrypted  copy of your secret key: without entering the passphrase you
       won't be able to use it.

       However if you want to use such a key with  Asterisk,  you'll  have  to
       start  it  interactively, because the scripts that start asterisk can't
       use that encrypted key.

       The key is identified by a name. If you don't write  the	 name  on  the
       command-line you'll be prompted for one. The outputs of the script are:

       name.pub
	      The public key: not secret. Send this to the other side.

       name.key
	      The private key: secret.

       Those files should be copied to /var/lib/asterisk/keys

       (The private key: on your system. The public key: on other systems)

       To see the currently-installed keys from the asterisk CLI, use the com‐
       mand

	      keys show

OPTIONS
       -q
	      Run quietly.

       -n
	      Don't encrypt the private key.

SECURITY
       The keys are created, using the umask of the user running the  command.
       To  create the keys in a secure manner, you should check to ensure that
       your umask is first set to disallow the private key from	 being	world-
       readable, such as with the following commands:

       umask 0066

       astgenkey yourkey

       And  then  make	the key accessible to Asterisk (assuming you run it as
       user "asterisk").

	 chown asterisk /var/lib/asterisk/keys/yourname.*

FILES
       /var/lib/asterisk/keys

SEE ALSO
       asterisk(8), genrsa(1), rsa(1),

       http://www.voip-info.org/wiki-Asterisk+iax+rsa+auth

AUTHOR
       This manual page	 was  written  by  Tzafrir  Cohen  <tzafrir.cohen@xor‐
       com.com>	 Permission  is granted to copy, distribute and/or modify this
       document under the terms of the GNU General Public License,  Version  2
       any later version published by the Free Software Foundation.

       On  Debian systems, the complete text of the GNU General Public License
       can be found in /usr/share/common-licenses/GPL-2.

Asterisk			May 14th, 2005			  ASTGENKEY(8)

Vote for polarhome