Just go get a regular signed cert like you would for mod_ssl for apache, It will work. cat the key and the cert into agent.pem and the chain cert into cafile.pem and fire it up... I did this it works great. Startssl.com is a good alternative -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire T: +1.918.420.9266 | F: +1.918.420.9267 | M: +1.918.424.WEST iNUM: +883 5100 1420 9266 ISN: 410*543 On Feb 22, 2013, at 1:59 AM, mehroz <mehroz.ashraf85@gmail.com> wrote:
Moreover, i am unable to import "cafile.pem" in my 3CX phone. Could it be the reason if these errors?
1.Do i need client certificate to establish SSL connection with every softphone? 2.I have read that we can use FScomm phone to test but where does it get the certificate file ? 3.How can i check that FS has really seen the agent.pem file and OK for SSL/TLS SIP?
Meanwhile i'll map domain name on FS server and will try to generate certificates using domain name. ...and ill be waiting for anyone to put his thoughts in , where i am! Thanks