<div dir="ltr">Hello,<div>the file was named correctly but you got me on the right path.</div><div>I somehow had set the certs directory as owned by www-data, must have been some issue with my install playbook.</div><div><br></div><div>It's fixed now, thanks!</div><div><br></div><div>Best regards,</div><div>Luca</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Aug 22, 2016 at 4:04 PM, Trever L. Adams <span dir="ltr"><<a href="mailto:trever@middleearth.sapphiresunday.org" target="_blank">trever@middleearth.sapphiresunday.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div><div class="h5">
<div>On 08/22/2016 07:58 AM, Trever L. Adams
wrote:<br>
</div>
<blockquote type="cite">
<pre>On 08/22/2016 04:35 AM, Luca Pradovera wrote:
</pre>
<blockquote type="cite">
<pre>Hello,
I am running two servers, one (A) with ref 6c0f18d960, the other (B)
with ref 0074589311, and the configuration is copied over verbatim.
Certificates have been built using Letsencrypt, with the same script
on both boxes.
On server A, any WebRTC client that tries to initiate a call gets a
"switch_core_cert.c:209 FP FILE ERR!" and the call immediately goes down.
The issue is present whether I test with Verto Communicator or my
Verto-based custom client.
Where could I start looking? The logs are not very helpful, it seems.
Thanks!
Luca Pradovera
</pre>
</blockquote>
Did you install the certs into the freeswitch configuration
directory in
the certs sub directory? Is it named wss.pem? I just had this
happen
this morning.
Trever
<br>
</blockquote>
</div></div><a href="https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie" target="_blank">https://freeswitch.org/<wbr>confluence/display/FREESWITCH/<wbr>Debian+8+Jessie</a><br>
That is what helped me. Particulary the line:<br>
<br>
<div>cat /etc/letsencrypt/live/$DOMAIN/<wbr>fullchain.pem
/etc/letsencrypt/live/$DOMAIN/<wbr>privkey.pem >
/etc/freeswitch/tls/wss.pem<br>
<br>
I imagine this will have to be done whenever the certificate is
renewed. I am a few weeks into my first period and this is a test
machine so, I haven't figured that out/worked around it yet.<br>
<br>
Hopefully that helps.<span class="HOEnZb"><font color="#888888"><br>
<br>
Trever<code><br>
</code></font></span></div>
</div>
<br>______________________________<wbr>______________________________<wbr>_____________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.<wbr>freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.<wbr>org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.<wbr>freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>