Hi Bipin,
We've found that these are the certs which FreeSWITCH will use, the pem file will need the public and private key (same as your wss cert). You'll also need to make sure the user for FreeSWITCH has read permission to the certs.
agent.pem
dtls-srtp.pem
tls.pem
wss.pem
FreeSWITCH doesn't seem to need the intermediary and root cert of the CA.
Here are some of the TLS parameters you might also want on your SIP profile.
Name: tls
Value: true
Name: tls-bind-params
Value: transport=tls
Name: tls-cert-dir
Value: "Your Cert Directory Path"
Name: tls-sip-port
Value: 5061
Name: tls-verify-date
Value: true
Name: tls-verify-depth
Value: 2
Name: tls-verify-policy
Value: all|subjects_all
Name: tls-version
Value: tlsv1.2
Shaun
From: FreeSWITCH-users [mailto:freeswitch-users-bounces@lists.freeswitch.org]
On Behalf Of Bipin Patel
Sent: 16 September 2017 06:49
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Subject: Re: [Freeswitch-users] TLS and SRTP commercial certs go in which file?
hi,
no one?
Regards,
Bipin
-------- Original Message --------
Subject: [Freeswitch-users] TLS and SRTP commercial certs go in which file?
From: Bipin Patel <bipin@xbipin.com>
To: FreeSWITCH Users Help
<freeswitch-users@lists.freeswitch.org>
Date: 9/15/2017, 3:44:33 PM
hi,
when i setup verto on my server i used commercial certificates with wss.pem containing the following and all that works brilliant:
-----BEGIN CERTIFICATE-----
<lots of gibberish from the actual certificate>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<lots of gibberish from the actual certificate>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<lots of gibberish from the intermediate certificate>
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
<even more gibberish from the root certificate>
-----END CERTIFICATE-----
now i want to use the same certificate for TLS and SRTP and i was reading the docs and it mentioned to create a agent.pem file with the actual server cert and key but where do i copy the intermediatory and root cert of the CA, which folders do both go in and with what filename?
any help is appreciated--
Regards,
Bipin
_________________________________________________________________________Professional FreeSWITCH Consulting Services:consulting@freeswitch.orghttp://www.freeswitchsolutions.comOfficial FreeSWITCH Siteshttp://www.freeswitch.orghttp://confluence.freeswitch.orghttp://www.cluecon.comFreeSWITCH-users mailing listFreeSWITCH-users@lists.freeswitch.orghttp://lists.freeswitch.org/mailman/listinfo/freeswitch-usersUNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-usershttp://www.freeswitch.org
______________________________________________________________________
This message has been checked for all known viruses by MessageLabs Virus Scanning Service.
______________________________________________________________________
|