Hey David,
I did a search in the packages and found gentls_cert is put in /usr/bin by default unless you specified an argument to install FS somewhere else.
Unless you have some need to be creating your own self-signed cert it seems like you could use lets encrypt (at least according to the Debian 8 install page) which may simplify some of the key management (creation/renewal) for you. I believe
their simple renewal script is called certbot. You just need to wrap certbot in a bash script calling the profile rescan after the key is renewed like Joel Serrano said.
Thanks,
Branden
From: FreeSWITCH-users <freeswitch-users-bounces@lists.freeswitch.org>
On Behalf Of David P
Sent: Tuesday, May 29, 2018 11:49 AM
To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org>
Subject: Re: [Freeswitch-users] Achieving TLS + SRTP for inbound calls
Hi Joel, please have a look at my first post yesterday in this thread in which I ask about that doc. In particular, what is {prefix} for a jessie install? And if I follow steps 1-4, how do I renew the cert later?
Hi David,
You have information on how to generate the certificates..
On Mon, May 28, 2018 at 9:46 PM, David P <davidswalkabout@gmail.com> wrote:
To be a little more specific, I think you would suggest following https://freeswitch.org/confluence/display/FREESWITCH/WebRTC#WebRTC-InstallCertificates
after installing fs on jessie. However, the section there about "Install Certificates" assumes there is already a cert, key, and chain on disk that can be concatenated into a wss.pem. But it seems to me those files don't exist after installing fs on jessie;
in particular, /etc/freeswitch/tls/ is empty.
On Mon, May 28, 2018 at 9:00 PM, David P <davidswalkabout@gmail.com> wrote:
Ok, Giovanni. Using your confluence page's search box (not google) for jessie yields one match:
I launched a debian jessie EC2, then followed section "Installing From Debian Packages" at the link above. In particular, I followed the advice in the comment about creating a "freeswitch" folder under /etc before the apt-get to install
freeswitch. There were no errors.
Now the only thing under /etc/freeswitch/ is an empty tls/ folder. Is this expected?
On Mon, May 28, 2018 at 8:03 AM, Giovanni Maruzzelli <gmaruzz@gmail.com> wrote:
- Trash your aws instance
- Start with a new jessie 64 sefver i stance (jessie!!!)
- follow the steps to "install freeswit h on jessie" (copy and paste)
Do not try anything advanced until you know the basics.
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org