cat the cert, the key and the chain cert into wss.pem and get rid of ca-bundle.crt 

I noticed we forgot to do that on the demo since we discovered you need them all together.

I reproduced what you said and fixed it by doing the above.

On Fri, Jul 25, 2014 at 2:25 PM, Oleg Stolyar <olegstolyar@gmail.com> wrote:

Guys,

I've run into a strange problem.  I cannot establish a wss connection to my FreeSWITCH from my Android Chrome or Android Firefox.  I believe Firefox on a Mac is also affected although it works fine on both Chrome and Firefox on Windows.

The error is "The site's security certificate is not trusted"

I thought that I did not set up the cert correctly but it turns out that the FS own WebRTC demo has the same problem.  If you go to this URL https://webrtc.freeswitch.org:7443 from your Android Chrome browser, you will see it.

I consulted with my security team and the best we could guess was that the FS code does not check or use the cert chain from ca-bundle.crt and some browsers are not smart enough to figure it out on their own.

Any ideas?

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

--

Anthony Minessale II       ♬ @anthmfs  ♬ @FreeSWITCH  ♬

☞ http://freeswitch.org/  ☞ http://cluecon.com/  ☞ http://twitter.com/FreeSWITCH

☞ irc.freenode.net #freeswitch ☞ http://freeswitch.org/g+

ClueCon Weekly Development Call 

☎ sip:888@conference.freeswitch.org  ☎ +19193869900 

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org