Brekeke SIP Server Wiki

The following settings are necessary for SSL:

 

1. Create a certificate.

There are some ways to create a certificate. Refer to “HTTPS” section of the follow link: (https://docs.brekeke.com/sip/setup-secure-connections-tls-wss-https-with-certificate)

 

2. Create a directory to store the certificate file.

Here, as example, we create “keystore” directory under <brekeke_install_dir>/conf
<Linux>

# mkdir /tomcat/conf/keystore

<Windows>

Create “keystore” folder under “C:\Program Files\Brekeke\sip\conf”.

 

3. Copy the certificate file to the “keystore” directory .

Here, as example,  we store the certificate file (self_signed.jks) into “keystore” directory
<Linux>

# cp  self_signed.jks /tomcat/conf/keystore/

 <Windows>

Put “self_signed.jks” file into  “C:\Program Files\Brekeke\sip\conf\ keystore” folder.

 

4. Open <brekek_install_dir> /conf/server.xml.

Uncomment the “SSL HTTP/1.1 Connector” entry.

<Linux>

# vi /tomcat/conf/ server.xml

<Windows>

Edit the server.xml under the” C:\Program Files\Brekeke\sip\conf”

Changed contents:

-Before-

<!--
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"  
maxThreads="150" scheme="https" secure="true"  clientAuth="false" sslProtocol="TLS" />                                                             
  -->

-After-   Remove the comment out characters and add keystore entries.        

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"            
               clientAuth="false" sslProtocol="TLS" keystoreFile="conf/keystore/self_signed.jks" keystorePass="changeit"/>

*When you edit these parameters, please modify the correct file path and password of the certificate file in your environment.

 

5. Restart your machine.

6. Access https://Brekeke_server_Address:ssl_port/sip (ex. https//127.0.0.1:8443/sip)