
Dialogic® Diva® SIPcontrol™ Configuration
Page 45
Note for CER files: CER files can be renamed to .pem directly if they are base64 encoded. No bag attribute
lines and/or additional CR and empty lines are allowed. If CER files are ASN.1 coded, they need to be converted
with a converter tool.
Note for PFX files: The PFX or PKCS#12 format is a binary format for storing the server certificate, any
intermediate certificates, and the private key in one encryptable file. When converting a PFX file to PEM format,
tools like OpenSSL will put all the certificates and the private key into a single file. You will need to open the file
in a text editor and copy each certificate and private key (including the BEGIN/END statements) to its own
individual text file and save them as certificate.cer, CACert.cer, and privateKey.key respectively.
How to Retrieve Keys and Certificates from a PFX file for Use in Diva SIPcontrol
In the following procedure, openssl is used as example converter tool.
1. Export the private key file from the PFX file:
openssl pkcs12 -in filename.pfx -nocerts -out protected-key.pem
2. Remove the passphrase from the private key as required by Diva SIPcontrol:
openssl rsa -in protected-key.pem -out key.pem
3. Export the certificate file from the PFX file:
openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.cer
4. Export the Root CA certificate file from the PFX file:
openssl pkcs12 -in filename.pfx -cacerts -nokeys -out cacert.cer
Setting up a Security Profile
To set up or modify a security profile, click the Details button in the Security Profiles section. To open the
online help for a specific parameter, click the parameter, and a window with the help text will appear.
The screen below shows the web interface with no certificates uploaded.
To upload a certificate or key file:
1. Click the Browse button next to the type of file you want to upload.
2. In the Choose File to Upload window locate the certificate or key file, and click Open.
Comentarios a estos manuales