<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <font size="-1"><font face="Arial">hi,<br>
        <br>
        after playing around i figured this, some corrections i need to
        make for others willing to use the same:<br>
        <br>
        agent.pem file needs to have ur commercial cert followed by the
        private key but if u just use that zoiper for android will give
        a warning about untrusted cert so we need to also add the
        intermediary followed by the root CA cert in the the cafile.pem
        to avoid this warning on client side.<br>
        wss.pem is used for verto which needs to have ur commercial cert
        followed by its private key followed by intermediary cert
        followed by root CA cert, if u dont use verto then ignore this
        file and FS will self create it when using only TLS and SRTP.<br>
        tls.pem file i think is used as default cert but i just copied
        the data from agent.pem to this<br>
        dtls-srtp.pem is used for verto so i think that got created by
        default also<br>
        <br>
        bear in mind zoiper for android doesnt allow to import ur own
        certs but just uses its own self signed cert so i add to set
        tls-verify-policy to none to make it work<br>
        <br>
        <br>
      </font></font>
    <div class="moz-signature">
      <style>
body {
  font-family: Verdana, sans-serif;
  font-size: 0.8em;
  color:#484848;
}
h1, h2, h3 { font-family: "Trebuchet MS", Verdana, sans-serif; margin:0in; margin-bottom:.0001pt; }
p.footr { font-family: "Trebuchet MS", Verdana, sans-serif; margin:0in; margin-bottom:.0001pt; }
h1 { font-size: 1.2em; }
h2, h3 { font-size: 1.1em; }
a, a:link, a:visited { color: #2A5685;}
a:hover, a:active { color: #c61a1a; }
a.wiki-anchor { display: none; }
hr {
  width: 100%;
  height: 1px;
  background: #ccc;
  border: 0;
}
</style>Regards,<br>
      Bipin<br>
      <br>
      <br>
      <hr>
    </div>
    <div class="moz-cite-prefix">-------- Original Message --------<br>
      Subject: Re: [Freeswitch-users] TLS and SRTP commercial certs go
      in which file?<br>
      From: Shaun Stokes <a class="moz-txt-link-rfc2396E" href="mailto:shaun.stokes@itec-support.co.uk"><shaun.stokes@itec-support.co.uk></a><br>
      To: FreeSWITCH Users Help
      <a class="moz-txt-link-rfc2396E" href="mailto:freeswitch-users@lists.freeswitch.org"><freeswitch-users@lists.freeswitch.org></a><br>
      Date: 9/18/2017, 12:03:47 PM<br>
    </div>
    <blockquote type="cite"
cite="mid:6FD2F8B5BB72834E9939AEDF9FB802A901E869D6ED@mbx-01.sysconfig.co.uk">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <meta name="Generator" content="Microsoft Word 15 (filtered
        medium)">
      <!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
      <style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:"Calibri Light";
        panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:"Trebuchet MS";
        panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;
        color:black;}
h1
        {mso-style-priority:9;
        mso-style-link:"Heading 1 Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:14.5pt;
        font-family:"Trebuchet MS",sans-serif;
        color:black;
        font-weight:bold;}
h2
        {mso-style-priority:9;
        mso-style-link:"Heading 2 Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:13.0pt;
        font-family:"Trebuchet MS",sans-serif;
        color:black;
        font-weight:bold;}
h3
        {mso-style-priority:9;
        mso-style-link:"Heading 3 Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:13.0pt;
        font-family:"Trebuchet MS",sans-serif;
        color:black;
        font-weight:bold;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:#2A5685;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:#2A5685;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML Preformatted Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New";
        color:black;}
span.Heading1Char
        {mso-style-name:"Heading 1 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 1";
        font-family:"Calibri Light",sans-serif;
        color:#2E74B5;}
span.Heading2Char
        {mso-style-name:"Heading 2 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 2";
        font-family:"Calibri Light",sans-serif;
        color:#2E74B5;}
span.Heading3Char
        {mso-style-name:"Heading 3 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 3";
        font-family:"Calibri Light",sans-serif;
        color:#1F4D78;}
span.HTMLPreformattedChar
        {mso-style-name:"HTML Preformatted Char";
        mso-style-priority:99;
        mso-style-link:"HTML Preformatted";
        font-family:Consolas;
        color:black;}
p.footr, li.footr, div.footr
        {mso-style-name:footr;
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Trebuchet MS",sans-serif;
        color:black;}
p.msochpdefault, li.msochpdefault, div.msochpdefault
        {mso-style-name:msochpdefault;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:10.0pt;
        font-family:"Times New Roman",serif;}
span.heading1char0
        {mso-style-name:heading1char;
        font-family:"Calibri Light",sans-serif;
        color:#2E74B5;}
span.heading2char0
        {mso-style-name:heading2char;
        font-family:"Calibri Light",sans-serif;
        color:#2E74B5;}
span.heading3char0
        {mso-style-name:heading3char;
        font-family:"Calibri Light",sans-serif;
        color:#1F4D78;}
span.htmlpreformattedchar0
        {mso-style-name:htmlpreformattedchar;
        font-family:Consolas;
        color:black;}
span.emailstyle23
        {mso-style-name:emailstyle23;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
span.emailstyle24
        {mso-style-name:emailstyle24;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
span.EmailStyle31
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Hi
            Bipin,<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Putting
            the same into all 4 pem’s certainly works, and that’s
            correct no intermediary or root ca required providing you
            have the public and private key in your pem files.<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">The
            wiki article for SIP_TLS could do with being updated, but I
            don’t know exactly what each of the 4 certs are used for.<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">This
            is my best guess at what each of the certificates are used
            for.<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">agent.pem
            – FreeSWITCH public server cert<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">tls.pem
            – Used for TLS communication<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">dtls-srtp.pem
            – Used for DTLS\SRTP communication<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">wss.pem
            – Used for WebRTC communication<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Shaun<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
        <div>
          <div style="border:none;border-top:solid #E1E1E1
            1.0pt;padding:3.0pt 0cm 0cm 0cm">
            <p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"
                  lang="EN-US">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"
                lang="EN-US"> FreeSWITCH-users
                [<a class="moz-txt-link-freetext" href="mailto:freeswitch-users-bounces@lists.freeswitch.org">mailto:freeswitch-users-bounces@lists.freeswitch.org</a>]
                <b>On Behalf Of </b>Bipin Patel<br>
                <b>Sent:</b> 17 September 2017 05:43<br>
                <b>To:</b> FreeSWITCH Users Help
                <a class="moz-txt-link-rfc2396E" href="mailto:freeswitch-users@lists.freeswitch.org"><freeswitch-users@lists.freeswitch.org></a><br>
                <b>Subject:</b> Re: [Freeswitch-users] TLS and SRTP
                commercial certs go in which file?<o:p></o:p></span></p>
          </div>
        </div>
        <p class="MsoNormal"><o:p> </o:p></p>
        <div>
          <div>
            <p
style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:0cm"><span
                style="color:black">Hi,<o:p></o:p></span></p>
            <p
style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:0cm"><span
                style="color:black">Thanks for that info so if I
                understood it right the agent.pem file will have my cert
                and key inside it only and no intermediary or root ca
                cert is required at all, but what goes in the tls.pem
                file?<o:p></o:p></span></p>
          </div>
          <div>
            <p
style="mso-margin-top-alt:10.0pt;margin-right:0cm;margin-bottom:10.0pt;margin-left:0cm"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">On
                September 17, 2017 5:45:28 AM Shaun Stokes <<a
                  href="mailto:shaun.stokes@itec-support.co.uk"
                  moz-do-not-send="true">shaun.stokes@itec-support.co.uk</a>>
                wrote:<o:p></o:p></span></p>
            <blockquote style="border:none;border-left:solid gray
              1.0pt;padding:0cm 0cm 0cm
              5.0pt;margin-left:4.5pt;margin-right:0cm">
              <div>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Hi
                    Bipin,</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">We've
                    found that these are the certs which FreeSWITCH will
                    use, the pem file will need the public and private
                    key (same as your wss cert). You'll also need to
                    make sure the user for FreeSWITCH has read
                    permission to the certs.</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">agent.pem</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">dtls-srtp.pem</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">tls.pem</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">wss.pem</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">FreeSWITCH
                    doesn't seem to need the intermediary and root cert
                    of the CA.</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Here
                    are some of the TLS parameters you might also want
                    on your SIP profile.</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    true</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls-bind-params</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    transport=tls</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls-cert-dir</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    "Your Cert Directory Path"</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls-sip-port</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    5061</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls-verify-date</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    true</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls-verify-depth</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    2</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls-verify-policy</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    all|subjects_all</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Name:
                    tls-version</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Value:
                    tlsv1.2</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Shaun</span><o:p></o:p></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
                <div>
                  <div style="border:none;border-top:solid #E1E1E1
                    1.0pt;padding:3.0pt 0cm 0cm 0cm">
                    <p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"
                          lang="EN-US">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"
                        lang="EN-US"> FreeSWITCH-users [<a
                          href="mailto:freeswitch-users-bounces@lists.freeswitch.org"
                          moz-do-not-send="true">mailto:freeswitch-users-bounces@lists.freeswitch.org</a>]
                        <b>On Behalf Of </b>Bipin Patel<br>
                        <b>Sent:</b> 16 September 2017 06:49<br>
                        <b>To:</b> FreeSWITCH Users Help <<a
                          href="mailto:freeswitch-users@lists.freeswitch.org"
                          moz-do-not-send="true">freeswitch-users@lists.freeswitch.org</a>><br>
                        <b>Subject:</b> Re: [Freeswitch-users] TLS and
                        SRTP commercial certs go in which file?</span><o:p></o:p></p>
                  </div>
                </div>
                <p class="MsoNormal"> <o:p></o:p></p>
                <p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif">hi,<br>
                    <br>
                    no one?</span><o:p></o:p></p>
                <div>
                  <p class="MsoNormal" style="margin-bottom:12.0pt">Regards,<br>
                    Bipin<o:p></o:p></p>
                  <div class="MsoNormal" style="text-align:center"
                    align="center">
                    <hr size="1" align="center" width="100%">
                  </div>
                </div>
                <div>
                  <p class="MsoNormal">-------- Original Message
                    --------<br>
                    Subject: [Freeswitch-users] TLS and SRTP commercial
                    certs go in which file?<br>
                    From: Bipin Patel <a href="mailto:bipin@xbipin.com"
                      moz-do-not-send="true"><bipin@xbipin.com></a><br>
                    To: FreeSWITCH Users Help <a
                      href="mailto:freeswitch-users@lists.freeswitch.org"
                      moz-do-not-send="true">
                      <freeswitch-users@lists.freeswitch.org></a><br>
                    Date: 9/15/2017, 3:44:33 PM<o:p></o:p></p>
                </div>
                <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
                  <p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif">hi,<br>
                      <br>
                      when i setup verto on my server i used commercial
                      certificates with wss.pem containing the following
                      and all that works brilliant:<br>
                      -----BEGIN CERTIFICATE-----<br>
                      <lots of gibberish from the actual
                      certificate><br>
                      -----END CERTIFICATE-----<br>
                      -----BEGIN RSA PRIVATE KEY-----<br>
                      <lots of gibberish from the actual
                      certificate><br>
                      -----END RSA PRIVATE KEY-----<br>
                      -----BEGIN CERTIFICATE-----<br>
                      <lots of gibberish from the intermediate
                      certificate><br>
                      -----END CERTIFICATE-----<br>
                      -----BEGIN CERTIFICATE-----<br>
                      <even more gibberish from the root
                      certificate><br>
                      -----END CERTIFICATE-----<br>
                      <br>
                      now i want to use the same certificate for TLS and
                      SRTP and i was reading the docs and it mentioned
                      to create a agent.pem file with the actual server
                      cert and key but where do i copy the
                      intermediatory and root cert of the CA, which
                      folders do both go in and with what filename?<br>
                      <br>
                      any help is appreciated</span><o:p></o:p></p>
                  <div>
                    <p class="MsoNormal" style="margin-bottom:12.0pt">--
                      <br>
                      Regards,<br>
                      Bipin<o:p></o:p></p>
                    <div class="MsoNormal" style="text-align:center"
                      align="center">
                      <hr size="1" align="center" width="100%">
                    </div>
                  </div>
                  <p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
                  <pre>_________________________________________________________________________<o:p></o:p></pre>
                  <pre>Professional FreeSWITCH Consulting Services:<o:p></o:p></pre>
                  <pre><a href="mailto:consulting@freeswitch.org" moz-do-not-send="true">consulting@freeswitch.org</a><o:p></o:p></pre>
                  <pre><a href="http://www.freeswitchsolutions.com" moz-do-not-send="true">http://www.freeswitchsolutions.com</a><o:p></o:p></pre>
                  <pre> <o:p></o:p></pre>
                  <pre>Official FreeSWITCH Sites<o:p></o:p></pre>
                  <pre><a href="http://www.freeswitch.org" moz-do-not-send="true">http://www.freeswitch.org</a><o:p></o:p></pre>
                  <pre><a href="http://confluence.freeswitch.org" moz-do-not-send="true">http://confluence.freeswitch.org</a><o:p></o:p></pre>
                  <pre><a href="http://www.cluecon.com" moz-do-not-send="true">http://www.cluecon.com</a><o:p></o:p></pre>
                  <pre> <o:p></o:p></pre>
                  <pre>FreeSWITCH-users mailing list<o:p></o:p></pre>
                  <pre><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" moz-do-not-send="true">FreeSWITCH-users@lists.freeswitch.org</a><o:p></o:p></pre>
                  <pre><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" moz-do-not-send="true">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><o:p></o:p></pre>
                  <pre>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" moz-do-not-send="true">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><o:p></o:p></pre>
                  <pre><a href="http://www.freeswitch.org" moz-do-not-send="true">http://www.freeswitch.org</a><o:p></o:p></pre>
                </blockquote>
                <p class="MsoNormal"><br>
                  <br>
______________________________________________________________________<br>
                  This message has been checked for all known viruses by
                  MessageLabs Virus Scanning Service.<br>
______________________________________________________________________<o:p></o:p></p>
              </div>
              <table class="MsoNormalTable" cellpadding="0" border="0">
                <tbody>
                  <tr>
                    <td style="padding:.75pt .75pt .75pt .75pt">
                      <p class="MsoNormal"><span
                          style="color:windowtext"><img
                            id="_x0000_i1027"
src="http://www.itec-support.co.uk/wp-content/uploads/2016/07/email_logo.jpg"
                            moz-do-not-send="true" border="0"><o:p></o:p></span></p>
                    </td>
                    <td style="padding:.75pt .75pt .75pt .75pt"
                      valign="top">
                      <div>
                        <p class="MsoNormal"><span
                            style="color:windowtext">Shaun Stokes -
                            Infrastructure Analyst<o:p></o:p></span></p>
                      </div>
                      <div>
                        <table class="MsoNormalTable" cellpadding="0"
                          border="0">
                          <tbody>
                            <tr>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt"><br>
                              </td>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt"><br>
                              </td>
                            </tr>
                            <tr>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt">
                                <p class="MsoNormal"><span
                                    style="color:windowtext">T : <o:p></o:p></span></p>
                              </td>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt">
                                <p class="MsoNormal"><span
                                    style="color:windowtext">01453
                                    700713<o:p></o:p></span></p>
                              </td>
                            </tr>
                            <tr>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt">
                                <p class="MsoNormal"><span
                                    style="color:windowtext">E : <o:p></o:p></span></p>
                              </td>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt">
                                <p class="MsoNormal"><span
                                    style="color:windowtext"><a
                                      href="mailto:shaun.stokes@itec-support.co.uk"
                                      moz-do-not-send="true">shaun.stokes@itec-support.co.uk</a><o:p></o:p></span></p>
                              </td>
                            </tr>
                            <tr>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt">
                                <p class="MsoNormal"><span
                                    style="color:windowtext">W : <o:p></o:p></span></p>
                              </td>
                              <td style="padding:.75pt .75pt .75pt
                                .75pt">
                                <p class="MsoNormal"><span
                                    style="color:windowtext"><a
                                      href="http://www.itec-support.co.uk"
                                      moz-do-not-send="true">www.itec-support.co.uk</a><o:p></o:p></span></p>
                              </td>
                            </tr>
                          </tbody>
                        </table>
                      </div>
                    </td>
                  </tr>
                </tbody>
              </table>
              <div>
                <p class="MsoNormal">Registered Address :- ITEC Support,
                  Suite 2 Prospect House, Bath Road, Stroud,
                  Gloucestershire GL5 3QF
                  <br>
                  Company No. 06908001 <o:p></o:p></p>
              </div>
              <div>
                <p class="MsoNormal"><br>
                  CONFIDENTIALITY NOTICE <br>
                  This communication and the information it contains are
                  intended for the person or organisation to which it is
                  addressed. Its contents are confidential and may be
                  protected in law. Unauthorised use, copying or
                  disclosure of any of it may be unlawful. If you are
                  not the intended recipient, please contact us
                  immediately. <br>
                  The contents of any attachments in this e-mail may
                  contain software viruses, which could damage your own
                  computer system. While ITEC Support has taken every
                  reasonable precaution to minimise this risk, we cannot
                  accept liability for any damage which you sustain as a
                  result of software viruses. You should carry out your
                  own virus checking procedure before opening any
                  attachment.
                  <o:p></o:p></p>
              </div>
              <p class="MsoNormal"><br>
______________________________________________________________________<br>
                This message has been checked for all known viruses by
                MessageLabs Virus Scanning Service.<br>
______________________________________________________________________<br>
_________________________________________________________________________<br>
                Professional FreeSWITCH Consulting Services:<br>
                <a href="mailto:consulting%40freeswitch.org"
                  moz-do-not-send="true">consulting@freeswitch.org</a><br>
                <a href="http://www.freeswitchsolutions.com"
                  moz-do-not-send="true">http://www.freeswitchsolutions.com</a><br>
                <br>
                Official FreeSWITCH Sites<br>
                <a href="http://www.freeswitch.org"
                  moz-do-not-send="true">http://www.freeswitch.org</a><br>
                <a href="http://confluence.freeswitch.org"
                  moz-do-not-send="true">http://confluence.freeswitch.org</a><br>
                <a href="http://www.cluecon.com" moz-do-not-send="true">http://www.cluecon.com</a><br>
                <br>
                FreeSWITCH-users mailing list<br>
                <a href="mailto:FreeSWITCH-users%40lists.freeswitch.org"
                  moz-do-not-send="true">FreeSWITCH-users@lists.freeswitch.org</a><br>
                <a
                  href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users"
                  moz-do-not-send="true">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
                UNSUBSCRIBE:<a
                  href="http://lists.freeswitch.org/mailman/options/freeswitch-users"
                  moz-do-not-send="true">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
                <a href="http://www.freeswitch.org"
                  moz-do-not-send="true">http://www.freeswitch.org</a><o:p></o:p></p>
            </blockquote>
          </div>
        </div>
        <p class="MsoNormal"><span style="color:windowtext"><br>
______________________________________________________________________<br>
            This message has been checked for all known viruses by
            MessageLabs Virus Scanning Service.<br>
______________________________________________________________________<o:p></o:p></span></p>
      </div>
      <br clear="all">
______________________________________________________________________<br>
      This message has been checked for all known viruses by MessageLabs
      Virus Scanning Service.<br>
______________________________________________________________________<br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
<a class="moz-txt-link-abbreviated" href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a>

Official FreeSWITCH Sites
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://confluence.freeswitch.org">http://confluence.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://www.cluecon.com">http://www.cluecon.com</a>

FreeSWITCH-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a>
<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a>
UNSUBSCRIBE:<a class="moz-txt-link-freetext" href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a>
<a class="moz-txt-link-freetext" href="http://www.freeswitch.org">http://www.freeswitch.org</a></pre>
    </blockquote>
    <br>
  </body>
</html>