Bladeren bron

Create turn certificate if needed

Bob Mottram 9 jaren geleden
bovenliggende
commit
b9f6d1cf19
1 gewijzigde bestanden met toevoegingen van 17 en 4 verwijderingen
  1. 17
    4
      src/freedombone

+ 17
- 4
src/freedombone Bestand weergeven

@@ -10387,10 +10387,25 @@ function install_sip_turn {
10387 10387
 
10388 10388
     apt-get -y install turnserver
10389 10389
 
10390
+    # create a nonce if needed
10390 10391
     if [ ! $VOIP_TURN_NONCE ]; then
10391 10392
         VOIP_TURN_NONCE="$(openssl rand -base64 32 | cut -c1-30)"
10392 10393
     fi
10393 10394
 
10395
+    # create a certificate if needed
10396
+    if [ ! -f /etc/ssl/certs/$DEFAULT_DOMAIN_NAME.pem ]; then
10397
+        if [ ! -f /etc/ssl/certs/$DEFAULT_DOMAIN_NAME.crt ]; then
10398
+            if [ ! -f /etc/ssl/certs/$DEFAULT_DOMAIN_NAME.dhparam ]; then
10399
+                if [[ $LETSENCRYPT_ENABLED != "yes" ]]; then
10400
+                    ${PROJECT_NAME}-addcert -h $DEFAULT_DOMAIN_NAME --dhkey $DH_KEYLENGTH
10401
+                else
10402
+                    ${PROJECT_NAME}-addcert -e $DEFAULT_DOMAIN_NAME -s $LETSENCRYPT_SERVER --dhkey $DH_KEYLENGTH --email $MY_EMAIL_ADDRESS
10403
+                fi
10404
+                check_certificates $DEFAULT_DOMAIN_NAME
10405
+            fi
10406
+        fi
10407
+    fi
10408
+    
10394 10409
     echo '##' > /etc/turnserver/turnserver.conf
10395 10410
     echo '# TurnServer configuration file.' >> /etc/turnserver/turnserver.conf
10396 10411
     echo '#' >> /etc/turnserver/turnserver.conf
@@ -10487,14 +10502,12 @@ function install_sip_turn {
10487 10502
     echo '## Certification Authority file.' >> /etc/turnserver/turnserver.conf
10488 10503
     echo "ca_file = \"/etc/ssl/certs/ca-certificates.crt\"" >> /etc/turnserver/turnserver.conf
10489 10504
     echo '' >> /etc/turnserver/turnserver.conf
10490
-    echo '## Server certificate file.' >> /etc/turnserver/turnserver.conf
10505
+    echo '## Server certificate file.' >> /etc/turnserver/turnserver.conf   
10491 10506
     if [ -f /etc/ssl/certs/$DEFAULT_DOMAIN_NAME.pem ]; then
10492 10507
         echo "cert_file = \"/etc/ssl/certs/$DEFAULT_DOMAIN_NAME.pem\"" >> /etc/turnserver/turnserver.conf
10493 10508
     else
10494 10509
         if [ -f /etc/ssl/certs/$DEFAULT_DOMAIN_NAME.crt ]; then
10495
-            echo "cert_file = \"/etc/ssl/certs/$DEFAULT_DOMAIN_NAME.crt\"" >> /etc/turnserver/turnserver.conf
10496
-        else
10497
-
10510
+            echo "cert_file = \"/etc/ssl/certs/$DEFAULT_DOMAIN_NAME.crt\"" >> /etc/turnserver/turnserver.conf           
10498 10511
         fi
10499 10512
     fi
10500 10513
     echo '' >> /etc/turnserver/turnserver.conf