[Freeswitch-users] Trusted CA for TLS

[Daniel Ivanov]

This has been discussed several times already. The comodo positivessl and
possibly other cert types work with an intermediate certificat, that you
should include in the CA bundle or ultimately in the agent.pem. search the
history or google for 'freeswitch ca bundle'
On Dec 4, 2013 12:13 AM, "Peter" <eidevm5 at gmail.com> wrote:

> On Android devices, if you go to Settings->Security->Trusted Credentials
> you'll see the full list of the CA root certs that come with your phone.
>
> Most clients (linphone being the notable exception) use the phone's root
> store and COMODO is usually in the list.
>
> However, it does depend on the type of SSL you generated.
>
>
> On Wed, Dec 4, 2013 at 3:51 AM, Nelson Luiz Ferraz de Camargo Penteado <
> bigx333 at gmail.com> wrote:
>
>> Godaddy doesn't work on Snom nor Yealink
>> On 3 Dec 2013 17:43, "Assaf Dahary" <adahary at gmail.com> wrote:
>>
>>> You are right, but I'm looking for trusted CAs that work on clients
>>> without any additional setup – it should serve none technical users.
>>>
>>>
>>>
>>> thanks
>>>
>>>
>>>
>>> *From:* freeswitch-users-bounces at lists.freeswitch.org [mailto:
>>> freeswitch-users-bounces at lists.freeswitch.org] *On Behalf Of *Andrew
>>> Cassidy
>>> *Sent:* Tuesday, December 03, 2013 3:55 PM
>>> *To:* FreeSWITCH Users Help
>>> *Subject:* Re: [Freeswitch-users] Trusted CA for TLS
>>>
>>>
>>>
>>> You can install CA certificates onto your Android device:
>>> https://support.google.com/nexus/answer/2844832?hl=en
>>>
>>>
>>>
>>> On 3 December 2013 13:11, adahary <adahary at gmail.com> wrote:
>>>
>>> I would like to share my finding about using trusted CA for TLS for
>>> registering without any additional file installation on the client side.
>>>
>>> To use a trusted CA with freeswitch I just did the following is /conf/ssl
>>> 1. cat my.key my.crt > agent.pem
>>> 2. cat chain&root  > cafile.pem
>>>
>>> I could NOT register with CSipSimple over TLS when using CA from StartSSL
>>> and COMODO.
>>>
>>> I could register with Thawte!
>>>
>>> Did anyone was able to register over TLS with other trusted CA (like
>>> Godaddy
>>> and others) ?
>>> If so then with what type of client?
>>>
>>>
>>>
>>>
>>> --
>>> View this message in context:
>>> http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.html
>>> Sent from the freeswitch-users mailing list archive at Nabble.com.
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> 
>>> 
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://wiki.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>>
>>>
>>>
>>> --
>>> *Andrew Cassidy BSc (Hons) MBCS SSCA*
>>>
>>> Managing Director
>>>
>>>
>>>
>>> *T <info at cassidywebservices.co.uk> *03300 100 960  *F
>>> <info at cassidywebservices.co.uk> *03300 100 961
>>>
>>> *E <info at cassidywebservices.co.uk> *andrew at cassidywebservices.co.uk
>>>
>>> *W <info at cassidywebservices.co.uk> *www.cassidywebservices.co.uk
>>> ------------------------------
>>>
>>> No virus found in this message.
>>> Checked by AVG - www.avg.com
>>> Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> 
>>> 
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://wiki.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20131203/1a8bf321/attachment-0001.html