[Freeswitch-users] WSS Certificate issue

[Oleg Stolyar]

Thanks Anthony!


On Fri, Jul 25, 2014 at 5:26 PM, Anthony Minessale <
anthony.minessale at gmail.com> wrote:

> cat the cert, the key and the chain cert into wss.pem and get rid of
> ca-bundle.crt
> I noticed we forgot to do that on the demo since we discovered you need
> them all together.
> I reproduced what you said and fixed it by doing the above.
>
>
>
>
> On Fri, Jul 25, 2014 at 2:25 PM, Oleg Stolyar <olegstolyar at gmail.com>
> wrote:
>
>> Guys,
>>
>> I've run into a strange problem.  I cannot establish a wss connection to
>> my FreeSWITCH from my Android Chrome or Android Firefox.  I believe Firefox
>> on a Mac is also affected although it works fine on both Chrome and Firefox
>> on Windows.
>>
>> The error is "The site's security certificate is not trusted"
>>
>> I thought that I did not set up the cert correctly but it turns out that
>> the FS own WebRTC demo has the same problem.  If you go to this URL
>> https://webrtc.freeswitch.org:7443 from your Android Chrome browser, you
>> will see it.
>>
>> I consulted with my security team and the best we could guess was that
>> the FS code does not check or use the cert chain from ca-bundle.crt and
>> some browsers are not smart enough to figure it out on their own.
>>
>> Any ideas?
>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>
>
> --
> Anthony Minessale II       ♬ @anthmfs  ♬ @FreeSWITCH  ♬
>
> ☞ http://freeswitch.org/  ☞ http://cluecon.com/  ☞
> http://twitter.com/FreeSWITCH
> ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+
> <http://freeswitch.org/g+>*
>
> ClueCon Weekly Development Call
> ☎ sip:888 at conference.freeswitch.org  ☎ +19193869900
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20140725/4b96e0a7/attachment.html