I was able to use the Letsencrypt certificate (domain is pbx.blah.com) using the following: cat /etc/letsencrypt/live/pbx.blah.com/fullchain.pem /etc/letsencrypt/live/pbx.blah.com/privkey.pem > /etc/freeswitch/conf/ssl/agent.pem The root CA was DST as shown by: openssl x509 -in /etc/letsencrypt/live/pbx.blah.com/chain.pem -noout -issuer Thus the DST_Root_CA_X3.pem was obtained from: https://www.identrust.com/certificates/trustid/root-download-x3.html The cafile was generated using: cat /etc/letsencrypt/live/pbx.blah.com/chain.pem DST_Root_CA_X3.pem > /etc/freeswitch/conf/ssl/cafile.pem Finally checked # openssl verify -CAfile cafile.pem agent.pem agent.pem: OK Hope this is helpful to somebody. On 11/21/2016 11:09 AM, Michael Jerris wrote:
there are some instructions here:
https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8...
On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s@gmail.com <mailto:rajil.s@gmail.com>> wrote:
Hello,
I have been using self generated certificates (https://wiki.freeswitch.org/wiki/SIP_TLS) until now. Is it possible to use Letsencrypt generated certificates for TLS?
Thanks
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org