<div dir="ltr">Hi,<div><br></div><div>I wonder why freeswitch does not use system's CA certificates for SSL/TLS verification? I have Let's Encrypt certificate on the web secrive side and I have troubles with http_cache over https (server's cert cant be verified).</div><div><br></div><div>In freeswitch'es wiki I've read (<a href="https://wiki.freeswitch.org/wiki/Mod_http_cache#Installing">https://wiki.freeswitch.org/wiki/Mod_http_cache#Installing</a>):</div><div><br></div><div><span style="color:rgb(0,0,0);font-family:sans-serif;font-size:12.8px">For HTTPS support, grab the latest CA certs from </span><a rel="nofollow" class="external gmail-free" href="http://curl.haxx.se/ca/cacert.pem" style="text-decoration:none;color:rgb(102,51,102);background-image:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAVklEQVR4Xn3PgQkAMQhDUXfqTu7kTtkpd5RA8AInfArtQ2iRXFWT2QedAfttj2FsPIOE1eCOlEuoWWjgzYaB/IkeGOrxXhqB+uA9Bfcm0lAZuh+YIeAD+cAqSz4kCMUAAAAASUVORK5CYII=");background-position:100% 50%;background-size:initial;background-repeat:no-repeat;background-origin:initial;background-clip:initial;padding-right:13px;font-family:sans-serif;font-size:12.8px">http://curl.haxx.se/ca/cacert.pem</a><span style="color:rgb(0,0,0);font-family:sans-serif;font-size:12.8px"> and install in /usr/local/freeswitch/conf. An older copy is also available in freeswitch/src/mod/applications/mod_http_cache/conf/cacert.pem.</span><br></div><div><span style="color:rgb(0,0,0);font-family:sans-serif;font-size:12.8px"><br></span></div><div><span style="color:rgb(0,0,0);font-family:sans-serif;font-size:12.8px">First, what is <a href="http://haxx.se">haxx.se</a>? I do not know and it is not an authority for me. So do I need to bundle cacers myself? Why do I need to do it (for verification of SSL/TLS of external service with real certificate) if I already have it on my system?</span></div><div><span style="color:rgb(0,0,0);font-family:sans-serif;font-size:12.8px"><br></span></div><div><span style="color:rgb(0,0,0);font-family:sans-serif;font-size:12.8px">Tell me please where I am wrong? Thanks in advance.</span></div><div><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">С уважением,<br>Владислав Захожай<br><br></div></div>
</div></div>