Avaya 1110 Fundamentals page 402

X.509 Certificates
Server) restrict the ability to export the private key. You must take care when you generate
certificates to ensure that you properly configure the ability to export.
You should sign the file in a secure environment because the signing certificate private key
must be accessible. If the private key is password-protected, you must enter this password to
successfully create a signature.
Table 86: OpenSSL-based Linux script for file signing
Open SSL-based Linux script for file signing.
Table 86: OpenSSL-based Linux script for file signing
#!/bin/sh
# $1 - Input Unsigned File
# $2 - Signing Certificate
# $3 - Signing Certificate Private Key
# $4 – Output Signed File
unsigned_file=$1
sign_cert_file=$2
sign_cert_pk_file=$3
signed_file=$4
# Setup temporary files
tmp_signature_file="/tmp/resource$$.tmp"
# Create a detached signature
openssl smime –sign –in ${unsigned_file} –signer ${sign_cert_file} –
outform PEM –binary –inkey ${sign_cert_pk_file} –out ${signed_file}
# Now append the signature to the unsigned file
cat ${unsigned_file} ${tmp_signature_file} > ${signed_file}
# Clean up
rm –f ${tmp_signature_file}
Table 87: OpenSSL-based Windows script for file signing
of Open SSL-based Windows script for file signing.
Table 87: OpenSSL-based Windows script for file signing
REM %1 - Input Unsigned File
REM %2 - Signing Certificate
REM %3 - Signing Certificate Private Key
REM %4 – Output Signed File
set unsigned_file=%1
set sign_cert_file=%2
set sign_cert_pk_file=%3
set signed_file=%4
402 IP Deskphones Fundamentals
Comments? infodev@avaya.com
on page 402 provides an example of
on page 402 provides an example
February 2013