hi,
i'm trying to use a letsencrypt generated cert with freeswitch but am
not sure how to proceed. I've read the old and new wiki posts concerning
tls but they don't seem to cover my exact scenario. It seems to me that
freeswitch is looking into the configured "tls-cert-dir" for the
hardcoded filename tls.pem and is expecting that a self generated ca has
signed it. i have placed the fullchain.pem in that directory (generated
with certbot) and have renamed it tls.pem but i guess it's not finding
the CA sig it expects(?) as i'm getting:
tport_tls.c:1044 tls_connect() tls_connect(0x373c000e8d0): TLS setup
failed (error:00000005:lib(0):func(0):DH lib)
when trying to connect with csipsimple from phone. I would like to avoid
generating client certs signed by a custom CA where users have to copy
the client cert and ca cert to their device as it adds complexity and
problems. Is there a workaround or suggested method for using a
letsencrypt cert with freeswitch so that clients like csipsimple can
just validate against their built-in CA store?
thanks in advance,
ITwrx
--
Information Technology Works
https://ITwrx.org
@ITwrxorg
____________________________________________________________ _____________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch- users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/ options/freeswitch-users
http://www.freeswitch.org
Brian
West
brian@freeswitch.org
Twitter:
@FreeSWITCH ,
@briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com
https://www.gofundme.com/freeswitch_ubuntu
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001
| F:+19184209002
| M:+1918424WEST
(9378)
Skype:briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org