Re: [Radmind-users] Certificates - all or nothing?

[Matthew L. <mat...@ep...>]

Thanks Greg,

That makes perfect sense. I may as well add a third line that launches it at port 6222 to help us as we migrate to the new tools that run with the new standard port number.

Matt.


On 27/3/08 16:13, "Greg Neagle" <Gre...@di...> wrote:

Several of us have handled this by bringing up two instances of the
radmind server process on our (physical) radmind server.  Once
instance does not require TLS, another instance does.

Here's my radmind startup script:

#!/bin/sh

. /etc/rc.common

##
# Start up radmind server
##

if [ -f /var/radmind/config ]; then
     CheckForNetwork

     if [ "${NETWORKUP}" = "-NO-" ]; then exit; fi

     ConsoleMessage "Starting Radmind Server"

     /usr/local/sbin/radmind -u 022 -p 6662 -m 50
     /usr/local/sbin/radmind -u 022 -p 6663 -w 2 -Z 2 -m 20
fi

Both instances share the same /var/radmind directoy - including
config, command. transcript, and file.  If a client connects to the
radmind server on port 6662, no certs are needed.  If they connect to
the server on port 6663, certs are required (and I've also turned on
compression).

You can then modify your radmind-running-scripts to see if there is a
local cert installed.  If there is, use the radmind server on port
6663 with -w2.  If not, use the radmind server on port 6662 with -w0.

-Greg

On Mar 27, 2008, at 9:00 AM, Matthew Lenny wrote:

> Hi,
>
> Another question on certs: am I right in assuming that if
> certificates are
> enabled on the radmind server, it won't accept any connections from
> clients
> without certificates?
>
> Just making sure I'm not missing something before I start thinking
> how to
> migrate from a no-certificate implementation to a certificate
> implementation.
>
> Anyone got any good methodologies they care to share? What needs to
> happen,
> in what order?
>
> TIA,
> Matt.
>
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
> _______________________________________________
> Radmind-users mailing list
> Rad...@li...
> https://lists.sourceforge.net/lists/listinfo/radmind-users