<p dir="ltr">This has been discussed several times already. The comodo positivessl and possibly other cert types work with an intermediate certificat, that you should include in the CA bundle or ultimately in the agent.pem. search the history or google for 'freeswitch ca bundle'</p>
<div class="gmail_quote">On Dec 4, 2013 12:13 AM, "Peter" <<a href="mailto:eidevm5@gmail.com">eidevm5@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div>On Android devices, if you go to Settings->Security->Trusted Credentials you'll see the full list of the CA root certs that come with your phone.<br><br></div>Most clients (linphone being the notable exception) use the phone's root store and COMODO is usually in the list.<br>
<br>However, it does depend on the type of SSL you generated.<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Dec 4, 2013 at 3:51 AM, Nelson Luiz Ferraz de Camargo Penteado <span dir="ltr"><<a href="mailto:bigx333@gmail.com" target="_blank">bigx333@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">Godaddy doesn't work on Snom nor Yealink</p><div><div>
<div class="gmail_quote">On 3 Dec 2013 17:43, "Assaf Dahary" <<a href="mailto:adahary@gmail.com" target="_blank">adahary@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US"><div><p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">You are right, but I'm looking for trusted CAs that work on clients without any additional setup – it should serve none technical users.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">thanks <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><u></u> <u></u></span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a> [mailto:<a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a>] <b>On Behalf Of </b>Andrew Cassidy<br>
<b>Sent:</b> Tuesday, December 03, 2013 3:55 PM<br><b>To:</b> FreeSWITCH Users Help<br><b>Subject:</b> Re: [Freeswitch-users] Trusted CA for TLS<u></u><u></u></span></p><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">
You can install CA certificates onto your Android device: <a href="https://support.google.com/nexus/answer/2844832?hl=en" target="_blank">https://support.google.com/nexus/answer/2844832?hl=en</a><u></u><u></u></p></div><div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p><div><p class="MsoNormal">On 3 December 2013 13:11, adahary <<a href="mailto:adahary@gmail.com" target="_blank">adahary@gmail.com</a>> wrote:<u></u><u></u></p>
<p class="MsoNormal">I would like to share my finding about using trusted CA for TLS for<br>registering without any additional file installation on the client side.<br><br>To use a trusted CA with freeswitch I just did the following is /conf/ssl<br>
1. cat my.key my.crt > agent.pem<br>2. cat chain&root > cafile.pem<br><br>I could NOT register with CSipSimple over TLS when using CA from StartSSL<br>and COMODO.<br><br>I could register with Thawte!<br><br>Did anyone was able to register over TLS with other trusted CA (like Godaddy<br>
and others) ?<br>If so then with what type of client?<br><br><br><br><br>--<br>View this message in context: <a href="http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.html" target="_blank">http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.html</a><br>
Sent from the freeswitch-users mailing list archive at Nabble.com.<br><br>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<br><a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br><br>FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br><a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br><a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br><a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><u></u><u></u></p>
</div><p class="MsoNormal"><br><br clear="all"><u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><p class="MsoNormal">-- <br><b>Andrew Cassidy BSc (Hons) MBCS SSCA</b><u></u><u></u></p><div><p class="MsoNormal">
Managing Director<u></u><u></u></p><div><div><p class="MsoNormal"><img border="0"><u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">
<b><span style="font-family:"Arial","sans-serif";color:#3387ab"><a href="mailto:info@cassidywebservices.co.uk" target="_blank"><span style="color:#3387ab;text-decoration:none">T</span></a> </span></b>03300 100 960 <b><span style="font-family:"Arial","sans-serif";color:#3387ab"><a href="mailto:info@cassidywebservices.co.uk" target="_blank"><span style="color:#3387ab;text-decoration:none">F</span></a> </span></b>03300 100 961<u></u><u></u></p>
</div><div><p class="MsoNormal"><b><span style="font-family:"Arial","sans-serif""><a href="mailto:info@cassidywebservices.co.uk" target="_blank"><span style="color:#3387ab;text-decoration:none">E</span></a> </span></b><a href="mailto:andrew@cassidywebservices.co.uk" target="_blank">andrew@cassidywebservices.co.uk</a><u></u><u></u></p>
</div><div><p class="MsoNormal"><b><span style="font-family:"Arial","sans-serif""><a href="mailto:info@cassidywebservices.co.uk" target="_blank"><span style="color:#3387ab;text-decoration:none">W</span></a> </span></b><a href="http://www.cassidywebservices.co.uk" target="_blank">www.cassidywebservices.co.uk</a><u></u><u></u></p>
</div></div></div></div></div><div class="MsoNormal" style="text-align:center" align="center"><hr style="color:#a0a0a0" align="center" noshade size="1" width="100%"></div><p class="MsoNormal">No virus found in this message.<br>
Checked by AVG - <a href="http://www.avg.com" target="_blank">www.avg.com</a><br>Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13<u></u><u></u></p></div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div>
</div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div>