<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Yes, this is mostly covered by this:<div class=""><br class=""></div><div class=""><a href="https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator" class="">https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator</a></div><div class=""><br class=""></div><div class="">Mike</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Dec 5, 2016, at 8:23 AM, Brian West <<a href="mailto:brian@freeswitch.org" class="">brian@freeswitch.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Don't we have something similar to this already in confluence?<div class=""><br class=""></div><div class=""><br class=""><div class="gmail_quote">---------- Forwarded message ----------<br class="">From: <b class="gmail_sendername">Rajil Saraswat</b> <span dir="ltr" class=""><<a href="mailto:rajil.s@gmail.com" class="">rajil.s@gmail.com</a>></span><br class="">Date: Sat, Dec 3, 2016 at 6:10 PM<br class="">Subject: Re: [Freeswitch-users] Letsencrypt and TLS<br class="">To: <a href="mailto:freeswitch-users@lists.freeswitch.org" class="">freeswitch-users@lists.freeswitch.org</a><br class=""><br class=""><br class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
I was able to use the Letsencrypt certificate (domain is
<a href="http://pbx.blah.com/" target="_blank" class="">pbx.blah.com</a>) using the following:<br class="">
<br class="">
<br class="">
cat /etc/letsencrypt/live/<a href="http://pbx.blah.com/fullchain.pem" target="_blank" class="">pbx.<wbr class="">blah.com/fullchain.pem</a>
/etc/letsencrypt/live/<a href="http://pbx.blah.com/privkey.pem" target="_blank" class="">pbx.<wbr class="">blah.com/privkey.pem</a> >
/etc/freeswitch/conf/ssl/<wbr class="">agent.pem<br class="">
<br class="">
The root CA was DST as shown by:<br class="">
openssl x509 -in /etc/letsencrypt/live/<a href="http://pbx.blah.com/chain.pem" target="_blank" class="">pbx.<wbr class="">blah.com/chain.pem</a> -noout
-issuer<br class="">
<br class="">
Thus the DST_Root_CA_X3.pem was obtained from:<br class="">
<a class="m_-3652732952008309562moz-txt-link-freetext" href="https://www.identrust.com/certificates/trustid/root-download-x3.html" target="_blank">https://www.identrust.com/<wbr class="">certificates/trustid/root-<wbr class="">download-x3.html</a><br class="">
<br class="">
The cafile was generated using:<br class="">
cat /etc/letsencrypt/live/<a href="http://pbx.blah.com/chain.pem" target="_blank" class="">pbx.<wbr class="">blah.com/chain.pem</a> DST_Root_CA_X3.pem
> /etc/freeswitch/conf/ssl/<wbr class="">cafile.pem<br class="">
<br class="">
Finally checked <br class="">
# openssl verify -CAfile cafile.pem agent.pem<br class="">
agent.pem: OK<br class="">
<br class="">
Hope this is helpful to somebody.<span class=""><br class="">
<br class="">
<div class="m_-3652732952008309562moz-cite-prefix">On 11/21/2016 11:09 AM, Michael Jerris
wrote:<br class="">
</div>
</span><blockquote type="cite" class=""><div class=""><div class="h5">
there are some instructions here:
<div class=""><br class="">
</div>
<div class=""><a href="https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator" target="_blank" class="">https://freeswitch.org/<wbr class="">confluence/display/FREESWITCH/<wbr class="">Debian+8+Jessie#Debian8Jessie-<wbr class="">Scriptinstallfreeswitchdemowit<wbr class="">hverto_communicator</a></div>
<div class=""><br class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On Nov 21, 2016, at 11:50 AM, Rajil Saraswat
<<a href="mailto:rajil.s@gmail.com" target="_blank" class="">rajil.s@gmail.com</a>>
wrote:</div>
<br class="m_-3652732952008309562Apple-interchange-newline">
<div class=""><p dir="ltr" class="">Hello, </p><p dir="ltr" class="">I have been using self generated
certificates (<a href="https://wiki.freeswitch.org/wiki/SIP_TLS" target="_blank" class="">https://wiki.freeswitch.org/<wbr class="">wiki/SIP_TLS</a>)
until now.<br class="">
Is it possible to use Letsencrypt generated certificates
for TLS? </p><p dir="ltr" class="">Thanks</p>
</div>
</blockquote>
</div>
<br class="">
</div>
<br class="">
<fieldset class="m_-3652732952008309562mimeAttachmentHeader"></fieldset>
<br class="">
</div></div><span class=""><pre class="">______________________________<wbr class="">______________________________<wbr class="">_____________
Professional FreeSWITCH Consulting Services:
<a class="m_-3652732952008309562moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitchsolutions.com/" target="_blank">http://www.<wbr class="">freeswitchsolutions.com</a>
Official FreeSWITCH Sites
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://confluence.freeswitch.org/" target="_blank">http://confluence.freeswitch.<wbr class="">org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a>
FreeSWITCH-users mailing list
<a class="m_-3652732952008309562moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.<wbr class="">freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/<wbr class="">mailman/listinfo/freeswitch-<wbr class="">users</a>
UNSUBSCRIBE:<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.<wbr class="">freeswitch.org/mailman/<wbr class="">options/freeswitch-users</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a></pre>
</span></blockquote>
<br class="">
</div>
<br class="">______________________________<wbr class="">______________________________<wbr class="">_____________<br class="">
Professional FreeSWITCH Consulting Services:<br class="">
<a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class="">
<a href="http://www.freeswitchsolutions.com/" rel="noreferrer" target="_blank" class="">http://www.<wbr class="">freeswitchsolutions.com</a><br class="">
<br class="">
Official FreeSWITCH Sites<br class="">
<a href="http://www.freeswitch.org/" rel="noreferrer" target="_blank" class="">http://www.freeswitch.org</a><br class="">
<a href="http://confluence.freeswitch.org/" rel="noreferrer" target="_blank" class="">http://confluence.freeswitch.<wbr class="">org</a><br class="">
<a href="http://www.cluecon.com/" rel="noreferrer" target="_blank" class="">http://www.cluecon.com</a><br class="">
<br class="">
FreeSWITCH-users mailing list<br class="">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="">FreeSWITCH-users@lists.<wbr class="">freeswitch.org</a><br class="">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank" class="">http://lists.freeswitch.org/<wbr class="">mailman/listinfo/freeswitch-<wbr class="">users</a><br class="">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank" class="">http://lists.<wbr class="">freeswitch.org/mailman/<wbr class="">options/freeswitch-users</a><br class="">
<a href="http://www.freeswitch.org/" rel="noreferrer" target="_blank" class="">http://www.freeswitch.org</a><br class=""></div><br class=""><br clear="all" class=""><div class=""><br class=""></div>-- <br class=""><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><p class=""><font face="courier new, monospace" class=""><b class=""><i class=""><font size="4" class="">Brian West</font></i></b><br class=""><span style="font-size:x-small" class=""><a href="mailto:brian@freeswitch.org" target="_blank" class="">brian@freeswitch.org</a></span></font></p><p class=""><font size="1" face="courier new, monospace" class=""><img src="http://billing.freeswitch.org/templates/default/img/whmcslogo.png" class=""><br class=""></font></p><p class=""><font size="2" face="monospace, monospace" class=""><b class=""><i class="">Twitter: @FreeSWITCH , @briankwest</i></b><br class=""><a href="http://www.freeswitchbook.com/" target="_blank" class="">http://www.freeswitchbook.com</a> (50% Discount using code FreeSwitch50)<br class=""><a href="http://www.freeswitchcookbook.com/" target="_blank" class="">http://www.freeswitchcookbook.com</a> </font><span style="font-family:monospace,monospace;font-size:small" class="">(50% Discount using code FreeSwitch50)</span><font size="2" face="monospace, monospace" class=""><br class=""></font><a href="https://www.gofundme.com/freeswitch_ubuntu" style="font-size:12.8px" target="_blank" class=""><font face="monospace, monospace" class="">https://www.gofundme.com/freeswitch_ubuntu</font></a></p><p class=""><font face="monospace, monospace" class="">Got Bugs? Report them <a href="https://freeswitch.org/jira" target="_blank" class="">here</a>! | Reddit: <a href="https://www.reddit.com/r/freeswitch" target="_blank" class="">/r/freeswitch</a></font></p><p class=""><font size="2" face="monospace, monospace" class=""><b class="">T:</b>+19184209001 | <b class="">F:</b>+19184209002 | <b class="">M:</b>+1918424WEST (9378)<br class=""><b class="">iNUM:</b>+883 5100 1420 9001 | <b class="">ISN:</b>410*543 | <b class="">Skype:</b>briankwest</font></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div>
_______________________________________________<br class="">Freeswitch-docs mailing list<br class=""><a href="mailto:Freeswitch-docs@lists.freeswitch.org" class="">Freeswitch-docs@lists.freeswitch.org</a><br class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs<br class=""></div></blockquote></div><br class=""></div></body></html>