[Freeswitch-docs] Fwd: [Freeswitch-users] Letsencrypt and TLS

[Brian West]

Don't we have something similar to this already in confluence?


---------- Forwarded message ----------
From: Rajil Saraswat <rajil.s at gmail.com>
Date: Sat, Dec 3, 2016 at 6:10 PM
Subject: Re: [Freeswitch-users] Letsencrypt and TLS
To: freeswitch-users at lists.freeswitch.org


I was able to use the Letsencrypt certificate (domain is pbx.blah.com)
using the following:


cat /etc/letsencrypt/live/pbx.blah.com/fullchain.pem /etc/letsencrypt/live/
pbx.blah.com/privkey.pem > /etc/freeswitch/conf/ssl/agent.pem

The root CA was DST as shown by:
openssl x509 -in /etc/letsencrypt/live/pbx.blah.com/chain.pem -noout -issuer

Thus the DST_Root_CA_X3.pem was obtained from:
https://www.identrust.com/certificates/trustid/root-download-x3.html

The cafile was generated using:
cat /etc/letsencrypt/live/pbx.blah.com/chain.pem  DST_Root_CA_X3.pem >
/etc/freeswitch/conf/ssl/cafile.pem

Finally checked
# openssl verify -CAfile cafile.pem agent.pem
agent.pem: OK

Hope this is helpful to somebody.

On 11/21/2016 11:09 AM, Michael Jerris wrote:

there are some instructions here:

https://freeswitch.org/confluence/display/FREESWITCH/
Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowit
hverto_communicator

On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s at gmail.com> wrote:

Hello,

I have been using self generated certificates (https://wiki.freeswitch.org/
wiki/SIP_TLS)  until now.
Is it possible to use Letsencrypt generated certificates for TLS?

Thanks




_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.orghttp://www.freeswitchsolutions.com

Official FreeSWITCH
Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.com

FreeSWITCH-users mailing
listFreeSWITCH-users at lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org



_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



-- 

*Brian West*
brian at freeswitch.org


*Twitter: @FreeSWITCH , @briankwest*
http://www.freeswitchbook.com (50% Discount using code FreeSwitch50)
http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50)
https://www.gofundme.com/freeswitch_ubuntu

Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit:
/r/freeswitch <https://www.reddit.com/r/freeswitch>

*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
*iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-docs/attachments/20161205/95f86f22/attachment.html