<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Yes, this is mostly covered by this:<div class=""><br class=""></div><div class=""><a href="https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator" class="">https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator</a></div><div class=""><br class=""></div><div class="">Mike</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Dec 5, 2016, at 8:23 AM, Brian West &lt;<a href="mailto:brian@freeswitch.org" class="">brian@freeswitch.org</a>&gt; wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Don't we have something similar to this already in confluence?<div class=""><br class=""></div><div class=""><br class=""><div class="gmail_quote">---------- Forwarded message ----------<br class="">From: <b class="gmail_sendername">Rajil Saraswat</b> <span dir="ltr" class="">&lt;<a href="mailto:rajil.s@gmail.com" class="">rajil.s@gmail.com</a>&gt;</span><br class="">Date: Sat, Dec 3, 2016 at 6:10 PM<br class="">Subject: Re: [Freeswitch-users] Letsencrypt and TLS<br class="">To: <a href="mailto:freeswitch-users@lists.freeswitch.org" class="">freeswitch-users@lists.freeswitch.org</a><br class=""><br class=""><br class="">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000" class="">
    I was able to use the Letsencrypt certificate (domain is
    <a href="http://pbx.blah.com/" target="_blank" class="">pbx.blah.com</a>) using the following:<br class="">
    <br class="">
    <br class="">
    cat /etc/letsencrypt/live/<a href="http://pbx.blah.com/fullchain.pem" target="_blank" class="">pbx.<wbr class="">blah.com/fullchain.pem</a>
    /etc/letsencrypt/live/<a href="http://pbx.blah.com/privkey.pem" target="_blank" class="">pbx.<wbr class="">blah.com/privkey.pem</a> &gt;
    /etc/freeswitch/conf/ssl/<wbr class="">agent.pem<br class="">
    <br class="">
    The root CA was DST as shown by:<br class="">
    openssl x509 -in /etc/letsencrypt/live/<a href="http://pbx.blah.com/chain.pem" target="_blank" class="">pbx.<wbr class="">blah.com/chain.pem</a> -noout
    -issuer<br class="">
    <br class="">
    Thus the DST_Root_CA_X3.pem was obtained from:<br class="">
    <a class="m_-3652732952008309562moz-txt-link-freetext" href="https://www.identrust.com/certificates/trustid/root-download-x3.html" target="_blank">https://www.identrust.com/<wbr class="">certificates/trustid/root-<wbr class="">download-x3.html</a><br class="">
    <br class="">
    The cafile was generated using:<br class="">
    cat /etc/letsencrypt/live/<a href="http://pbx.blah.com/chain.pem" target="_blank" class="">pbx.<wbr class="">blah.com/chain.pem</a>&nbsp; DST_Root_CA_X3.pem
    &gt; /etc/freeswitch/conf/ssl/<wbr class="">cafile.pem<br class="">
    <br class="">
    Finally checked <br class="">
    # openssl verify -CAfile cafile.pem agent.pem<br class="">
    agent.pem: OK<br class="">
    <br class="">
    Hope this is helpful to somebody.<span class=""><br class="">
    <br class="">
    <div class="m_-3652732952008309562moz-cite-prefix">On 11/21/2016 11:09 AM, Michael Jerris
      wrote:<br class="">
    </div>
    </span><blockquote type="cite" class=""><div class=""><div class="h5">
      
      there are some instructions here:
      <div class=""><br class="">
      </div>
      <div class=""><a href="https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator" target="_blank" class="">https://freeswitch.org/<wbr class="">confluence/display/FREESWITCH/<wbr class="">Debian+8+Jessie#Debian8Jessie-<wbr class="">Scriptinstallfreeswitchdemowit<wbr class="">hverto_communicator</a></div>
      <div class=""><br class="">
        <div class="">
          <blockquote type="cite" class="">
            <div class="">On Nov 21, 2016, at 11:50 AM, Rajil Saraswat
              &lt;<a href="mailto:rajil.s@gmail.com" target="_blank" class="">rajil.s@gmail.com</a>&gt;
              wrote:</div>
            <br class="m_-3652732952008309562Apple-interchange-newline">
            <div class=""><p dir="ltr" class="">Hello, </p><p dir="ltr" class="">I have been using self generated
                certificates (<a href="https://wiki.freeswitch.org/wiki/SIP_TLS" target="_blank" class="">https://wiki.freeswitch.org/<wbr class="">wiki/SIP_TLS</a>)&nbsp;
                until now.<br class="">
                Is it possible to use Letsencrypt generated certificates
                for TLS? </p><p dir="ltr" class="">Thanks</p>
            </div>
          </blockquote>
        </div>
        <br class="">
      </div>
      <br class="">
      <fieldset class="m_-3652732952008309562mimeAttachmentHeader"></fieldset>
      <br class="">
      </div></div><span class=""><pre class="">______________________________<wbr class="">______________________________<wbr class="">_____________
Professional FreeSWITCH Consulting Services: 
<a class="m_-3652732952008309562moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitchsolutions.com/" target="_blank">http://www.<wbr class="">freeswitchsolutions.com</a>

Official FreeSWITCH Sites
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://confluence.freeswitch.org/" target="_blank">http://confluence.freeswitch.<wbr class="">org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a>

FreeSWITCH-users mailing list
<a class="m_-3652732952008309562moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.<wbr class="">freeswitch.org</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/<wbr class="">mailman/listinfo/freeswitch-<wbr class="">users</a>
UNSUBSCRIBE:<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.<wbr class="">freeswitch.org/mailman/<wbr class="">options/freeswitch-users</a>
<a class="m_-3652732952008309562moz-txt-link-freetext" href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a></pre>
    </span></blockquote>
    <br class="">
  </div>

<br class="">______________________________<wbr class="">______________________________<wbr class="">_____________<br class="">
Professional FreeSWITCH Consulting Services:<br class="">
<a href="mailto:consulting@freeswitch.org" class="">consulting@freeswitch.org</a><br class="">
<a href="http://www.freeswitchsolutions.com/" rel="noreferrer" target="_blank" class="">http://www.<wbr class="">freeswitchsolutions.com</a><br class="">
<br class="">
Official FreeSWITCH Sites<br class="">
<a href="http://www.freeswitch.org/" rel="noreferrer" target="_blank" class="">http://www.freeswitch.org</a><br class="">
<a href="http://confluence.freeswitch.org/" rel="noreferrer" target="_blank" class="">http://confluence.freeswitch.<wbr class="">org</a><br class="">
<a href="http://www.cluecon.com/" rel="noreferrer" target="_blank" class="">http://www.cluecon.com</a><br class="">
<br class="">
FreeSWITCH-users mailing list<br class="">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="">FreeSWITCH-users@lists.<wbr class="">freeswitch.org</a><br class="">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank" class="">http://lists.freeswitch.org/<wbr class="">mailman/listinfo/freeswitch-<wbr class="">users</a><br class="">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank" class="">http://lists.<wbr class="">freeswitch.org/mailman/<wbr class="">options/freeswitch-users</a><br class="">
<a href="http://www.freeswitch.org/" rel="noreferrer" target="_blank" class="">http://www.freeswitch.org</a><br class=""></div><br class=""><br clear="all" class=""><div class=""><br class=""></div>-- <br class=""><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><p class=""><font face="courier new, monospace" class=""><b class=""><i class=""><font size="4" class="">Brian West</font></i></b><br class=""><span style="font-size:x-small" class=""><a href="mailto:brian@freeswitch.org" target="_blank" class="">brian@freeswitch.org</a></span></font></p><p class=""><font size="1" face="courier new, monospace" class=""><img src="http://billing.freeswitch.org/templates/default/img/whmcslogo.png" class=""><br class=""></font></p><p class=""><font size="2" face="monospace, monospace" class=""><b class=""><i class="">Twitter: @FreeSWITCH , @briankwest</i></b><br class=""><a href="http://www.freeswitchbook.com/" target="_blank" class="">http://www.freeswitchbook.com</a>&nbsp;(50% Discount using code FreeSwitch50)<br class=""><a href="http://www.freeswitchcookbook.com/" target="_blank" class="">http://www.freeswitchcookbook.com</a>&nbsp;</font><span style="font-family:monospace,monospace;font-size:small" class="">(50% Discount using code FreeSwitch50)</span><font size="2" face="monospace, monospace" class=""><br class=""></font><a href="https://www.gofundme.com/freeswitch_ubuntu" style="font-size:12.8px" target="_blank" class=""><font face="monospace, monospace" class="">https://www.gofundme.com/freeswitch_ubuntu</font></a></p><p class=""><font face="monospace, monospace" class="">Got Bugs? Report them <a href="https://freeswitch.org/jira" target="_blank" class="">here</a>! | Reddit:&nbsp;<a href="https://www.reddit.com/r/freeswitch" target="_blank" class="">/r/freeswitch</a></font></p><p class=""><font size="2" face="monospace, monospace" class=""><b class="">T:</b>+19184209001 | <b class="">F:</b>+19184209002 | <b class="">M:</b>+1918424WEST (9378)<br class=""><b class="">iNUM:</b>+883 5100 1420 9001 |&nbsp;<b class="">ISN:</b>410*543 |&nbsp;<b class="">Skype:</b>briankwest</font></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div>
_______________________________________________<br class="">Freeswitch-docs mailing list<br class=""><a href="mailto:Freeswitch-docs@lists.freeswitch.org" class="">Freeswitch-docs@lists.freeswitch.org</a><br class="">http://lists.freeswitch.org/mailman/listinfo/freeswitch-docs<br class=""></div></blockquote></div><br class=""></div></body></html>