Dear Maintainer,

$ man astgenkey

[...]
       Those files should be copied to /var/lib/asterisk/keys
[...]

This is the default location when compiling asterisk from source and unfortunately
also mentioned in many docutmentations.

When keys are put in /var/lib/asterisk/keys they are not being loaded.
This is not the location of the 'Debian' flavour Asterisk looks for the keys.

Correct for Debian is: /usr/share/asterisk/keys/

Please ship a manpage reflecting this Debian specific location. Took me
quite a while to fiture out :-)

Hi,

Are you sure? Where is it set?

https://sources.debian.org/src/asterisk/1%3A22.7.0~dfsg%2B~cs6.15.60671435-1/debian/patches/2010_astdatadir.patch

This patch sets astdatadir to /usr/share/asterisk but leaves (as can be
seen from the context) things like the keys dir under the astvarlibdir .

IIRC, astdatadir was added upstream when we merged most of our changes
to use /usr/share/asterisk , leaving only minor changes like that patch.

So I suspect the bug is that astkeydir is set to some other value
elsewhere, and that this should be fixed.

Hi Tzafrir

https://community.asterisk.org/t/how-to-rsa-keys-for-iax2-and-dundi/111489

On the machine I encountered that issue - asterisk was freshly
installed, astkeydir was not changed (I didn't even know it existed
until this case)

/etc/asterisk# grep -i astkey *
asterisk.conf:astkeydir => /var/lib/asterisk

Only this one occurence.

/etc/asterisk# LANG=C; ls -l /var/lib/asterisk/keys/ /usr/share/asterisk/keys/
/usr/share/asterisk/keys/:
total 24
-rw------- 1 asterisk asterisk  916 Jan  3 13:49 hb9eue.key
-rw------- 1 asterisk asterisk  272 Jan  3 13:49 hb9eue.pub
-rw------- 1 asterisk asterisk  916 Jan  3 13:50 sip.xxx.ch.key
-rw------- 1 asterisk asterisk  272 Jan  3 13:50 sip.xxx.ch.pub
drw------- 3 asterisk root     4096 Nov 23 10:43 stir_shaken
-rw------- 1 asterisk asterisk  272 Jan  3 14:54 vm.xxx.ch.pub

/var/lib/asterisk/keys/:
total 0

mail*CLI> reload res_crypto.so
Module 'res_crypto.so' reloaded successfully.
    -- Reloading module 'res_crypto.so' (Cryptographic Digital Signatures)
mail*CLI> keys show
Key Name           Type     Status           Sum
------------------ -------- ---------------- -------------------------------- 
vm.xxx.ch          PUBLIC   [Loaded]         88e9d803057565fa36898e6636cf1960
sip.xxx.ch         PUBLIC   [Loaded]         2b05a196a50ad6bf219af9410292551a
hb9eue             PUBLIC   [Loaded]         0c3a8f6992729c89c65c6427358316be
hb9eue             PRIVATE  [Loaded]         00d040cf4ae25475053934283254b899
sip.xxx.ch         PRIVATE  [Loaded]         de8e2d211d453b125f1ddceb1e8ccd9b

I did obfuscate the domain names.

So these definitely work from /usr/share/asterisk/keys/ and did not
work when I first placed them into /var/lib/asterisk/keys/ according to
the man page.

perhaps astkeydir should point to /var/lib/asterisk/keys/ instead of
just /var/lib/asterisk/ ?