New subject: [Freeswitch-docs] [Freeswitch-users] Letsencrypt and TLS

5 Dec 2016

      Don't we have something similar to this already in confluence?

---------- Forwarded message ----------
From: Rajil Saraswat <rajil.s@gmail.com>
Date: Sat, Dec 3, 2016 at 6:10 PM
Subject: Re: [Freeswitch-users] Letsencrypt and TLS
To: freeswitch-users@lists.freeswitch.org

I was able to use the Letsencrypt certificate (domain is pbx.blah.com)
using the following:

cat /etc/letsencrypt/live/pbx.blah.com/fullchain.pem /etc/letsencrypt/live/
pbx.blah.com/privkey.pem > /etc/freeswitch/conf/ssl/agent.pem

The root CA was DST as shown by:
openssl x509 -in /etc/letsencrypt/live/pbx.blah.com/chain.pem -noout -issuer

Thus the DST_Root_CA_X3.pem was obtained from:
https://www.identrust.com/certificates/trustid/root-download-x3.html

The cafile was generated using:
cat /etc/letsencrypt/live/pbx.blah.com/chain.pem  DST_Root_CA_X3.pem >
/etc/freeswitch/conf/ssl/cafile.pem

Finally checked
# openssl verify -CAfile cafile.pem agent.pem
agent.pem: OK

Hope this is helpful to somebody.

On 11/21/2016 11:09 AM, Michael Jerris wrote:

there are some instructions here:

https://freeswitch.org/confluence/display/FREESWITCH/
Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowit
hverto_communicator

On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s@gmail.com> wrote:

Hello,

I have been using self generated certificates (https://wiki.freeswitch.org/
wiki/SIP_TLS)  until now.
Is it possible to use Letsencrypt generated certificates for TLS?

Thanks

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.orghttp://www.freeswitchsolutions.com

Official FreeSWITCH
Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon....

FreeSWITCH-users mailing
listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.frees...

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

-- 

*Brian West*
brian@freeswitch.org

*Twitter: @FreeSWITCH , @briankwest*
http://www.freeswitchbook.com (50% Discount using code FreeSwitch50)
http://www.freeswitchcookbook.com (50% Discount using code FreeSwitch50)
https://www.gofundme.com/freeswitch_ubuntu

Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit:
/r/freeswitch <https://www.reddit.com/r/freeswitch>

*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
*iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest

[Freeswitch-docs] Fwd: [Freeswitch-users] Letsencrypt and TLS

Brian West

Michael Jerris

tags

participants (2)