<div dir="ltr">Don't we have something similar to this already in confluence?<div><br></div><div><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Rajil Saraswat</b> <span dir="ltr"><<a href="mailto:rajil.s@gmail.com">rajil.s@gmail.com</a>></span><br>Date: Sat, Dec 3, 2016 at 6:10 PM<br>Subject: Re: [Freeswitch-users] Letsencrypt and TLS<br>To: <a href="mailto:freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a><br><br><br>
<div bgcolor="#FFFFFF" text="#000000">
I was able to use the Letsencrypt certificate (domain is
<a href="http://pbx.blah.com" target="_blank">pbx.blah.com</a>) using the following:<br>
<br>
<br>
cat /etc/letsencrypt/live/<a href="http://pbx.blah.com/fullchain.pem" target="_blank">pbx.<wbr>blah.com/fullchain.pem</a>
/etc/letsencrypt/live/<a href="http://pbx.blah.com/privkey.pem" target="_blank">pbx.<wbr>blah.com/privkey.pem</a> >
/etc/freeswitch/conf/ssl/<wbr>agent.pem<br>
<br>
The root CA was DST as shown by:<br>
openssl x509 -in /etc/letsencrypt/live/<a href="http://pbx.blah.com/chain.pem" target="_blank">pbx.<wbr>blah.com/chain.pem</a> -noout
-issuer<br>
<br>
Thus the DST_Root_CA_X3.pem was obtained from:<br>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="https://www.identrust.com/certificates/trustid/root-download-x3.html" target="_blank">https://www.identrust.com/<wbr>certificates/trustid/root-<wbr>download-x3.html</a><br>
<br>
The cafile was generated using:<br>
cat /etc/letsencrypt/live/<a href="http://pbx.blah.com/chain.pem" target="_blank">pbx.<wbr>blah.com/chain.pem</a> DST_Root_CA_X3.pem
> /etc/freeswitch/conf/ssl/<wbr>cafile.pem<br>
<br>
Finally checked <br>
# openssl verify -CAfile cafile.pem agent.pem<br>
agent.pem: OK<br>
<br>
Hope this is helpful to somebody.<span class=""><br>
<br>
<div class="m_-3652732952008309562moz-cite-prefix">On 11/21/2016 11:09 AM, Michael Jerris
wrote:<br>
</div>
</span><blockquote type="cite"><div><div class="h5">
there are some instructions here:
<div><br>
</div>
<div><a href="https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator" target="_blank">https://freeswitch.org/<wbr>confluence/display/FREESWITCH/<wbr>Debian+8+Jessie#Debian8Jessie-<wbr>Scriptinstallfreeswitchdemowit<wbr>hverto_communicator</a></div>
<div><br>
<div>
<blockquote type="cite">
<div>On Nov 21, 2016, at 11:50 AM, Rajil Saraswat
<<a href="mailto:rajil.s@gmail.com" target="_blank">rajil.s@gmail.com</a>>
wrote:</div>
<br class="m_-3652732952008309562Apple-interchange-newline">
<div>
<p dir="ltr">Hello, </p>
<p dir="ltr">I have been using self generated
certificates (<a href="https://wiki.freeswitch.org/wiki/SIP_TLS" target="_blank">https://wiki.freeswitch.org/<wbr>wiki/SIP_TLS</a>)
until now.<br>
Is it possible to use Letsencrypt generated certificates
for TLS? </p>
<p dir="ltr">Thanks</p>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="m_-3652732952008309562mimeAttachmentHeader"></fieldset>
<br>
</div></div><span class=""><pre>______________________________<wbr>______________________________<wbr>_____________
Professional FreeSWITCH Consulting Services:
<a class="m_-3652732952008309562moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitchsolutions.com" target="_blank">http://www.<wbr>freeswitchsolutions.com</a>
Official FreeSWITCH Sites
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.<wbr>org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a>
FreeSWITCH-users mailing list
<a class="m_-3652732952008309562moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.<wbr>freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a>
UNSUBSCRIBE:<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a></pre>
</span></blockquote>
<br>
</div>
<br>______________________________<wbr>______________________________<wbr>_____________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.<wbr>freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.<wbr>org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.<wbr>freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">
<p><font face="courier new, monospace"><b><i><font size="4">Brian West</font></i></b><br><span style="font-size:x-small"><a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a></span></font></p>
<p><font size="1" face="courier new, monospace"><img src="http://billing.freeswitch.org/templates/default/img/whmcslogo.png"><br></font></p><p><font size="2" face="monospace, monospace"><b><i>Twitter: @FreeSWITCH , @briankwest</i></b><br><a href="http://www.freeswitchbook.com" target="_blank">http://www.freeswitchbook.com</a> (50% Discount using code FreeSwitch50)<br><a href="http://www.freeswitchcookbook.com" target="_blank">http://www.freeswitchcookbook.com</a> </font><span style="font-family:monospace,monospace;font-size:small">(50% Discount using code FreeSwitch50)</span><font size="2" face="monospace, monospace"><br></font><a href="https://www.gofundme.com/freeswitch_ubuntu" style="font-size:12.8px" target="_blank"><font face="monospace, monospace">https://www.gofundme.com/freeswitch_ubuntu</font></a></p><p><font face="monospace, monospace">Got Bugs? Report them <a href="https://freeswitch.org/jira" target="_blank">here</a>! | Reddit: <a href="https://www.reddit.com/r/freeswitch" target="_blank">/r/freeswitch</a></font></p>
<p><font size="2" face="monospace, monospace"><b>T:</b>+19184209001 | <b>F:</b>+19184209002 | <b>M:</b>+1918424WEST (9378)<br><b>iNUM:</b>+883 5100 1420 9001 | <b>ISN:</b>410*543 | <b>Skype:</b>briankwest</font></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div>