I was able to use the Letsencrypt certificate (domain is pbx.blah.com) using the following:


cat /etc/letsencrypt/live/pbx.blah.com/fullchain.pem /etc/letsencrypt/live/pbx.blah.com/privkey.pem > /etc/freeswitch/conf/ssl/agent.pem

The root CA was DST as shown by:
openssl x509 -in /etc/letsencrypt/live/pbx.blah.com/chain.pem -noout -issuer

Thus the DST_Root_CA_X3.pem was obtained from:
https://www.identrust.com/certificates/trustid/root-download-x3.html

The cafile was generated using:
cat /etc/letsencrypt/live/pbx.blah.com/chain.pem  DST_Root_CA_X3.pem > /etc/freeswitch/conf/ssl/cafile.pem

Finally checked
# openssl verify -CAfile cafile.pem agent.pem
agent.pem: OK

Hope this is helpful to somebody.

On 11/21/2016 11:09 AM, Michael Jerris wrote:

there are some instructions here:

https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator

On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s@gmail.com> wrote:

Hello,

I have been using self generated certificates (https://wiki.freeswitch.org/wiki/SIP_TLS)  until now.
Is it possible to use Letsencrypt generated certificates for TLS?

Thanks

_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org