Can a .pfx certificate be used for 3cx webserver nginx

[Daniel Wolf]

Hello,

we are running 3cx with nginx webserver on its own virtual machine.
We have own fqdn. Only one subdomain and the ports for it are portforwarded by the router to tthis virutal machine what runs so far fine.
The fqdn is also used for terminal services on another virtual machine. This has let's encrypt certificate for validation that renews all 3 months.
We are thinking to put in the subdomain for 3cx to this certificate. At the moment this is a .pfx file.

https://www.3cx.com/docs/self-hosted-instances-ssh/

says .pem files.
Any chance to use .pfx direct?

Regards
Daniel Wolf

 

[nub]

You can convert it,

linux:
openssl pkcs12 -in pkcs-12-certificate-and-key-file -out pem-certificate-and-key-file

windows:
https://slproweb.com/products/Win32OpenSSL.html

-never used the windows one

 

[Daniel Wolf]

Hello 3xcnub,

thanks, I found this solution too - but hoped I could skip that step in th skripting I am designing.

I hope I got this right (too much certificates and possible using for a unprofessional admin):

1. There is the certificate for nginx - but thats just for the trusting the webserver.
2. There is addition a way to secure SIP also by certificate.

I guess the same certificate can be used for both.

I am reading https://www.3cx.com/docs/secure-sip/
But this looks kind of different and there is no explantion if this can be renewed automatically. let's encrypt stays for just 3 months, so this has to be renewed by script otherwise it'll get forgotten.

Looks like this is in progress but not yet on my level.

 

[cobaltit]

So you probably want to start a new thread. Your original question was answered. Secure SIP is a separate topic and frankly 3CX is not ready for it today.