Sure, I am using 3rd party cert from comodo. I just did the following:

cat {privatekey} > tls.pem
cat {cert} >> tls.pem
cat {chain} >> tls.pem

Make sure that in your sip_profiles that use TLS that you have tls-cert-dir pointing to your tls.pem directory.

BTW, the same works for wss.pem

><>
nathan stratton


On Mon, Jun 22, 2020 at 10:56 PM ramelcom <ramelcom@gmail.com> wrote:
Hi,
I am trying to setup TLS in FreeSWITCH. In my usecase, FS acts as a server
and another SIP B2BUA acts as the client. I was able to successfully setup
the TLS if I generate the certificates at FS and configure with those.
However, if I want to use server certificate generated and signed by 3rd
party, it doesn't work. I added server certificate as agent.pem and root CA
as cacert.pem and cafile.pem. Also, I am configuring the root CA at SIP
B2BUA side. When SIP B2BUA sends Client Hello, FS rejects with 'Handshake
failed' error.
Can you please help on this?

Thanks
Ramesh



--
Sent from: http://freeswitch-users.2379917.n2.nabble.com/

_________________________________________________________________________

The FreeSWITCH project is sponsored by SignalWire https://signalwire.com
Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services.
Build your next product on our scalable cloud platform.

Join our online community to chat in real time https://signalwire.community

Professional FreeSWITCH Services
sales@freeswitch.com
https://freeswitch.com

Official FreeSWITCH Sites
https://freeswitch.com/oss
https://freeswitch.org/confluence
https://cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
https://freeswitch.com