[Freeswitch-users] Freeswitch CA certs

[Michael Jerris]

haxx.se <http://haxx.se/> are the makers of curl.

> On Dec 6, 2016, at 12:24 PM, Vladyslav Zakhozhai <v.zakhozhai at gmail.com> wrote:
> 
> Hi,
> 
> I wonder why freeswitch does not use system's CA certificates for SSL/TLS verification? I have Let's Encrypt certificate on the web secrive side and I have troubles with http_cache over https (server's cert cant be verified).
> 
> In freeswitch'es wiki I've read (https://wiki.freeswitch.org/wiki/Mod_http_cache#Installing <https://wiki.freeswitch.org/wiki/Mod_http_cache#Installing>):
> 
> For HTTPS support, grab the latest CA certs from http://curl.haxx.se/ca/cacert.pem <http://curl.haxx.se/ca/cacert.pem> and install in /usr/local/freeswitch/conf. An older copy is also available in freeswitch/src/mod/applications/mod_http_cache/conf/cacert.pem.
> 
> First, what is haxx.se <http://haxx.se/>? I do not know and it is not an authority for me. So do I need to bundle cacers myself? Why do I need to do it (for verification of SSL/TLS of external service with real certificate) if I already have it on my system?
> 
> Tell me please where I am wrong? Thanks in advance.
> 
> -- 
> С уважением,
> Владислав Захожай
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services: 
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20161206/1f01dd64/attachment.html