Thanks Nathan.

I am using FS 1.8.5. I used server cert (with chain) and private key in agent.pem and root CA certs in cacert.pem and cafile.pem.

Is root CA not needed here? I have configured the root CA cert @ the SIP B2BUA am using.

I am new to TLS so please bear with me if these are basic questions.

Thanks

Ramesh

On Tue, Jun 23, 2020 at 6:43 AM Nathan Stratton <nathan@robotics.net> wrote:

Sure, I am using 3rd party cert from comodo. I just did the following:

cat {privatekey} > tls.pem

cat {cert} >> tls.pem

cat {chain} >> tls.pem

Make sure that in your sip_profiles that use TLS that you have tls-cert-dir pointing to your tls.pem directory.

BTW, the same works for wss.pem

><>
nathan stratton

On Mon, Jun 22, 2020 at 10:56 PM ramelcom <ramelcom@gmail.com> wrote:

Hi,
I am trying to setup TLS in FreeSWITCH. In my usecase, FS acts as a server
and another SIP B2BUA acts as the client. I was able to successfully setup
the TLS if I generate the certificates at FS and configure with those.
However, if I want to use server certificate generated and signed by 3rd
party, it doesn't work. I added server certificate as agent.pem and root CA
as cacert.pem and cafile.pem. Also, I am configuring the root CA at SIP
B2BUA side. When SIP B2BUA sends Client Hello, FS rejects with 'Handshake
failed' error.
Can you please help on this?

Thanks
Ramesh



--
Sent from: http://freeswitch-users.2379917.n2.nabble.com/

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.
Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community

Professional FreeSWITCH Services
sales@freeswitch.com
https://freeswitch.com

Official FreeSWITCH Sites
https://freeswitch.com/oss
https://freeswitch.org/confluence
https://cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
https://freeswitch.com

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.
Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community

Professional FreeSWITCH Services
sales@freeswitch.com
https://freeswitch.com

Official FreeSWITCH Sites
https://freeswitch.com/oss
https://freeswitch.org/confluence
https://cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
https://freeswitch.com