SECURE SIP - Use existing cert

[PHit]

Hi,

under Security -> Secure SIP I could provide an certificate and private key.
But I've already an letsencrypt key generated on OS level via acme.

This Key I always copy to /var/lib/3cxpbx/Bin/nginx/conf/Instance1/PRIVATEKEY.pem after renew after 90 Days.
I dont't like to copy the cert and key manual to the webfrontend, is there an path for the cert/key where I culd copy it too?

Bye

Gregor

 

[Evolute IT]

This is an unsupported scenario so I doubt there is a way to do this, but at the same time, maybe there is. Usually Secure SIP should use the same SSL as Nginx (for the Console and Webclient.)

 

[NickD_3CX]

This happens automatically if you use a 3CX issued FQDN and SSL Certificates,so I am assuming that you are using a custom FQDN.

As Frederick said, there is no officially supported way of changing this, but the files where this is saved in are here:
/var/lib/3cxpbx/Instance1/Bin/Cert/

I advise against scripting something because if you make a mistake with permissions, probably the Management Console will not even start at all, plus after any change you need to restart the 3CX Services anyway.

 

[PHit]

Hi,

As Frederick said, there is no officially supported way of changing this, but the files where this is saved in are here:
/var/lib/3cxpbx/Instance1/Bin/Cert/

Yeah, I found this path after I copy the content of the cert and key over the webfrontend.
Wich is the main 3cx Service I've to restart? 3CXSystemService01.service and 3CXPhoneSystem01.service ?

No truble about the permissions, I will set them with the renew script.

 

[NickD_3CX]

Hi,


Yeah, I found this path after I copy the content of the cert and key over the webfrontend.
Wich is the main 3cx Service I've to restart? 3CXSystemService01.service and 3CXPhoneSystem01.service ?

No truble about the permissions, I will set them with the renew script.

All of them:

/usr/sbin/3CXStopServices
/usr/sbin/3CXStartServices