UC application cert signing with open ssl

[vijendra Saravanamuthu]

hi Guys,

one of my client is wondering if they can use open SSL to sign cisco cucm,unity con, ccx, imp tomcat , xmpp certificates using openSSL.?

please let me know if this is possible to sign and jabber will work without issues.

Thanks.

Vijay 

[James Hawkins]

You can do this - the best way to do this would be to create a root certificate and put that on all the PC's, phones etc. that the customer uses.

There is a useful article about doing this at the link below.

https://jamielinux.com/docs/openssl-certificate-authority/introduction.html 

If you are going to use MRA then you would be best off using a decent third party CA for the Expressway E cert - this is going to be mandatory if they want to connect 7800/8800 phones via MRA as they will not support connecting to an Expressway that has a cert from a non approved provider.

HTH

[Jaime Valencia]

You can use any CA you like as long as the certificates have the proper key usage and enhanced key usage for each product/application.