I've followed:
http://wiki.freeswitch.org/wiki/SIP_TLS
agent.pem => ./gentls_cert setup -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org.
cafile.pem => ./gentls_cert create_server -cn pbx.freeswitch.org -alt DNS:pbx.freeswitch.org -org freeswitch.org.
client.pem => ./gentls_cert create_client ...
also generated pkcs12 which was installed successfuly is both jitsi and csimplesip (but fail to register):
openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt

This is the TLS part of vars.xml:
<X-PRE-PROCESS cmd="set" data="sip_tls_version=sslv23"/>
  <!-- Internal SIP Profile -->
  <X-PRE-PROCESS cmd="set" data="internal_auth_calls=true"/>
  <X-PRE-PROCESS cmd="set" data="internal_sip_port=5070"/>
  <X-PRE-PROCESS cmd="set" data="internal_tls_port=5061"/>
  <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=true"/>
  <X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${base_dir}/conf/ssl"/>

The reload mod_sofia log shows that it is loading the .pem files from the conf/ssl.

any tls registration tls/1.2.3.4/sips from jitsi/csimplesip get rejected with certificate error.

thanks for your support

	
	
	
<br/><hr align="left" width="300" />
View this message in context: <a href="http://freeswitch-users.2379917.n2.nabble.com/Client-TLS-certificate-setup-tp7590319p7590335.html">Re: Client TLS certificate setup</a><br/>
Sent from the <a href="http://freeswitch-users.2379917.n2.nabble.com/">freeswitch-users mailing list archive</a> at Nabble.com.<br/>