Sure, I am using 3rd party cert from comodo. I just did the following: cat {privatekey} > tls.pem cat {cert} >> tls.pem cat {chain} >> tls.pem Make sure that in your sip_profiles that use TLS that you have tls-cert-dir pointing to your tls.pem directory. BTW, the same works for wss.pem
<> nathan stratton
On Mon, Jun 22, 2020 at 10:56 PM ramelcom <ramelcom@gmail.com> wrote:
Hi, I am trying to setup TLS in FreeSWITCH. In my usecase, FS acts as a server and another SIP B2BUA acts as the client. I was able to successfully setup the TLS if I generate the certificates at FS and configure with those. However, if I want to use server certificate generated and signed by 3rd party, it doesn't work. I added server certificate as agent.pem and root CA as cacert.pem and cafile.pem. Also, I am configuring the root CA at SIP B2BUA side. When SIP B2BUA sends Client Hello, FS rejects with 'Handshake failed' error. Can you please help on this?
Thanks Ramesh
-- Sent from: http://freeswitch-users.2379917.n2.nabble.com/
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com