[sr-dev] Lets encrypt and certificate renewals

[Olle E. Johansson]

Hi!
Letsencrypt.org is now in beta and offer free TLS certificates with a 3 month life time.

Certificates will be updated in the background. I haven’t looked into all scripts but I guess that there’s a script that renews the certificate and somehow tells the application to reload the certs.

We need to be able to reload certs in runtime, not by stopping and restarting Kamailio. Possibly either with a user signal or an RPC command reachable through kamcmd/kamctl.

Anyone else that has looked into how the cron scripts communicates with the server process?

/O
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2374 bytes
Desc: not available
URL: <http://lists.sip-router.org/pipermail/sr-dev/attachments/20151123/de2f71cf/attachment.bin>