[Astlinux-users] Certificate authority files missing

[Michael K. <mic...@ip...>]

Hi Team

An email from my developer.


Regards

Michael Knill



From: Matthew Knill <mat...@ip...>
Date: Tuesday, 3 February 2026 at 12:51 pm
To: Michael Knill <mic...@ip...>
Subject: Certificate authority files missing

We have noticed that for a number of our systems, the ca.key and ca.crt file were missing in /mnt/kd/ssl/sip-tls/keys/ which ended up causing errors in Asterisk. We update our SSL certificates using Let's Encrypt, however, it seems that these files are not actually changed by Let's Encrypt at all and are exclusively self-signed.

I have been unable to figure out why the files did not exist for this specific system. Looking through the system, I did find that the ast_tls_cert script does seem to be what generates these files, though I was unable to figure out where and how it’s actually run…

Regards,
Matthew Knill