[Freeswitch-users] Trusted CA for TLS

[Assaf Dahary]

Peter,

 

I've tested StartSSL and COMODO in the first place because I saw them in the
Android CA list.

But, unfortunately I couldn't register with the Android CSipSimple over TLS
even with two different FS servers.

 

Please explain  ' However, it does depend on the type of SSL you generated'.

 

I selected the regular (single domain) CA from both StartSSL and COMODO and
tested them with external ssl checker site.

 

From: freeswitch-users-bounces at lists.freeswitch.org
[mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Peter
Sent: Wednesday, December 04, 2013 12:11 AM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Trusted CA for TLS

 

On Android devices, if you go to Settings->Security->Trusted Credentials
you'll see the full list of the CA root certs that come with your phone.

Most clients (linphone being the notable exception) use the phone's root
store and COMODO is usually in the list.

However, it does depend on the type of SSL you generated.

 

On Wed, Dec 4, 2013 at 3:51 AM, Nelson Luiz Ferraz de Camargo Penteado
<bigx333 at gmail.com> wrote:

Godaddy doesn't work on Snom nor Yealink

On 3 Dec 2013 17:43, "Assaf Dahary" <adahary at gmail.com> wrote:

You are right, but I'm looking for trusted CAs that work on clients without
any additional setup - it should serve none technical users.

 

thanks 

 

From: freeswitch-users-bounces at lists.freeswitch.org
[mailto:freeswitch-users-bounces at lists.freeswitch.org] On Behalf Of Andrew
Cassidy
Sent: Tuesday, December 03, 2013 3:55 PM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Trusted CA for TLS

 

You can install CA certificates onto your Android device:
https://support.google.com/nexus/answer/2844832?hl=en

 

On 3 December 2013 13:11, adahary <adahary at gmail.com> wrote:

I would like to share my finding about using trusted CA for TLS for
registering without any additional file installation on the client side.

To use a trusted CA with freeswitch I just did the following is /conf/ssl
1. cat my.key my.crt > agent.pem
2. cat chain&root  > cafile.pem

I could NOT register with CSipSimple over TLS when using CA from StartSSL
and COMODO.

I could register with Thawte!

Did anyone was able to register over TLS with other trusted CA (like Godaddy
and others) ?
If so then with what type of client?




--
View this message in context:
http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h
tml
Sent from the freeswitch-users mailing list archive at Nabble.com.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com




Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org





 

-- 
Andrew Cassidy BSc (Hons) MBCS SSCA

Managing Director

 

 <mailto:info at cassidywebservices.co.uk> T 03300 100 960
<mailto:info at cassidywebservices.co.uk> F 03300 100 961

 <mailto:info at cassidywebservices.co.uk> E andrew at cassidywebservices.co.uk

 <mailto:info at cassidywebservices.co.uk> W www.cassidywebservices.co.uk

  _____  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com




Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com




Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

 

  _____  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20131204/28cb65c5/attachment.html