[Freeswitch-users] Using multiple SSL certificates

[Brian West]

It can really only do one certificate, most devices don't work with
wildcard certs so you're SOL and we don't do SNI that would require some
work down in sofia.

On Tue, Nov 20, 2018 at 4:36 PM Kevin Olbrich <ko at sv01.de> wrote:

> > *Point each profile to the individual directory which contains its
> specific agent.pem file.*
>
> For me, that sounds like "you can use different certs for external and
> internal". I don't think this means multiple certs per profile.
>
> Did you verify if your devices can use SNI? If not, this is not possible
> at all because the URI is sent after TLS handshake where you already have a
> connection while SNI does this during handshake.
>
> Kevin
>
> Am Di., 20. Nov. 2018 um 22:29 Uhr schrieb Michael Avers <
> michael at mailworks.org>:
>
>> Hi Brian, I found the following excerpt in Confluence's TLS page - is it
>> no longer relevant?
>> *Multiple Profile TLS*
>>
>> *If you have multiple Sofia SIP profiles, you may find yourself wanting
>> to enable TLS support for each of the profiles. However, each may be
>> represented to third parties using a different DNS record. In this case,
>> simply create a new directory under /{prefix}/freeswitch/conf/ssl/ for each
>> DNS record . Then place an agent.pem and cafile.pem into each of the
>> directories. Point each profile to the individual directory which contains
>> its specific agent.pem file.*
>>
>> Thank you,
>> Mike
>>
>>
>>
>> On Tue, Nov 20, 2018, at 10:07 AM, Brian West wrote:
>>
>> Not currently.
>> /b
>>
>>
>> On Tue, Nov 20, 2018 at 10:16 AM Michael Avers <michael at mailworks.org>
>> wrote:
>>
>> Hello,
>>
>> Is there a way to use more than one SSL certificate and have TLS enabled
>> across multiple domains? Is that something that I would need to use a
>> separate SIP profile for?
>>
>> Thank you,
>> Mike
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Services
>> sales at freeswitch.com
>> https://freeswitch.com
>>
>> Official FreeSWITCH Sites
>> https://freeswitch.com/oss
>> https://freeswitch.org/confluence
>> https://cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> https://freeswitch.com
>>
>>
>>
>> --
>>
>> Brian West | Co-founder and Developer
>>
>> Need Commercial support? email sales at freeswitch.com
>>
>> FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045
>> <https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>
>>
>> Email: brian at freeswitch.com
>>
>> Mobile: 918-424-9378
>>
>> Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>
>>
>> [image: https://www.facebook.com/signalwireinc?src=email]
>> <https://www.facebook.com/freeswitch> [image:
>> https://twitter.com/freeswitch] <https://twitter.com/freeswitch>
>>
>> *_________________________________________________________________________*
>> Professional FreeSWITCH Services
>> sales at freeswitch.com
>> https://freeswitch.com
>>
>> Official FreeSWITCH Sites
>> https://freeswitch.com/oss
>> https://freeswitch.org/confluence
>> https://cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> https://freeswitch.com
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Services
>> sales at freeswitch.com
>> https://freeswitch.com
>>
>> Official FreeSWITCH Sites
>> https://freeswitch.com/oss
>> https://freeswitch.org/confluence
>> https://cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> https://freeswitch.com
>
> _________________________________________________________________________
> Professional FreeSWITCH Services
> sales at freeswitch.com
> https://freeswitch.com
>
> Official FreeSWITCH Sites
> https://freeswitch.com/oss
> https://freeswitch.org/confluence
> https://cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> https://freeswitch.com



-- 

Brian West | Co-founder and Developer

Need Commercial support? email sales at freeswitch.com

FreeSWITCH Solutions | 17345 Civic Drive #2531 Brookfield, WI 53045
<https://maps.google.com/?q=17345+Civic+Drive+%232531+Brookfield,+WI+53045&entry=gmail&source=g>

Email: brian at freeswitch.com

Mobile: 918-424-9378

Website: https://www.FreeSWITCH.com <https://www.freeswitch.com/>

[image: https://www.facebook.com/signalwireinc?src=email]
<https://www.facebook.com/freeswitch> [image:
https://twitter.com/freeswitch] <https://twitter.com/freeswitch>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20181120/b9f4f300/attachment-0001.html>