I'm running this clean installation of FS: https://github.com/voxserv/freeswitch_conf_minimal Everything seems to work and I would now like to add TLS and SRTP encryption - for use on public WiFi and such. I've tried the following from this http://wiki.freeswitch.org/wiki/SIP_TLS#TLS.2C_SSL_and_SRTP_Encryption: ./gentls_cert setup -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org ./gentls_cert create_server -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org And in vars.xml: <X-PRE-PROCESS cmd="set" data="sip_tls_version=sslv23"/> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/> Of course with my own domain when generating certificates. Restarting FS and trying to connect to 5061 over TLS doesn't work. Looking in fs_cli with debug 7 doesn't output anything when the client tries to connect. How to debug or does anyone know what's wrong? My certificates are generated automatically in /usr/conf/ssl.