System message

Prepare the Key and Certificate

Brekeke SIP server TLS handling can accept two different key/certificate formats: OpenSSL and Java's keytool.

OpenSSL

1. Prepare the key and certificate files for Brekeke SIP server.
2. Convert them to DER format files.
   For example:
   > openssl pkcs8 -topk8 -nocrypt -in server.key -out key.der -outform der
   > openssl x509 -in server.crt -out cert.der -outform der
   - key.der: the server's key in DER format
   - cert.der: the server's certificate in DER format
3. Go to Brekeke SIP Server Admintool > [Configuration] > [SIP] → [TLS].
4. Select the “DER” at the [File Type].
5. Upload the server's key DER file at the [DER Key file].
6. Upload the server's certificate DER file at the [DER Certificate file].

Java Keytool

1. Prepare the key and certificate files for the SIP server.
2. Go to Brekeke SIP Server Admintool > [Configuration] > [SIP] → [TLS].
3. Select the “JKS” at the [File Type].
4. Upload the JKS file at the [JKS Key File].
5. Set the JKF file's password at the [JKS Password].

Enable the TLS Handling at Brekeke SIP Server

1. Go to Brekeke SIP Server Admintool > [Configuration] > [SIP] → [TLS].
2. Select the “on” at the [TLS-handling] and upload related files as above.
3. Restart the Brekeke SIP Server from Admintool.
4. If the TLS handling started successfully, the "TLS" will be shown at the [transport] field in the [Server Status] page.