[Freeswitch-users] Letsencrypt and TLS

[Rajil Saraswat]

I was able to use the Letsencrypt certificate (domain is pbx.blah.com)
using the following:


cat /etc/letsencrypt/live/pbx.blah.com/fullchain.pem
/etc/letsencrypt/live/pbx.blah.com/privkey.pem >
/etc/freeswitch/conf/ssl/agent.pem

The root CA was DST as shown by:
openssl x509 -in /etc/letsencrypt/live/pbx.blah.com/chain.pem -noout -issuer

Thus the DST_Root_CA_X3.pem was obtained from:
https://www.identrust.com/certificates/trustid/root-download-x3.html

The cafile was generated using:
cat /etc/letsencrypt/live/pbx.blah.com/chain.pem  DST_Root_CA_X3.pem >
/etc/freeswitch/conf/ssl/cafile.pem

Finally checked
# openssl verify -CAfile cafile.pem agent.pem
agent.pem: OK

Hope this is helpful to somebody.

On 11/21/2016 11:09 AM, Michael Jerris wrote:
> there are some instructions here:
>
> https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator
>
>> On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s at gmail.com
>> <mailto:rajil.s at gmail.com>> wrote:
>>
>> Hello,
>>
>> I have been using self generated certificates
>> (https://wiki.freeswitch.org/wiki/SIP_TLS)  until now.
>> Is it possible to use Letsencrypt generated certificates for TLS?
>>
>> Thanks
>>
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services: 
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20161203/a30765f0/attachment.html