If an example helps, here what I have in my script to generate the .pem files for FreeSWITCH to support WebRTC:

# Links to .crt and .key files

ssl_dir=${script_dir}/sc_ssl_cert

sc_crt=$ssl_dir/sc.crt

sc_key=$ssl_dir/sc.key

ca_crt=$ssl_dir/gd_bundle.crt

# create the .pem files

mkdir -p /usr/local/freeswitch/certs/

{ cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } > /usr/local/freeswitch/certs/wss.pem    # CERT, KEY AND CHAIN files

{ cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem    # CERT file AND key file

{ cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem    # CHAIN file or root CA

On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian@freeswitch.org> wrote:

Chain is the ca, cert is your cert

On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si> wrote:

Hi!

I bought wildcard certificate for using it with freeswitch. 

Now I have hard time to install it into Freeswitch and would appreciate any help.

I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:

Cert, Key and Chain(s) are all contained in a single file in this order:

  

-----BEGIN CERTIFICATE-----

<cert>

-----END CERTIFICATE-----

-----BEGIN RSA PRIVATE KEY-----

<key>

-----END RSA PRIVATE KEY-----

-----BEGIN CERTIFICATE-----

<chain>

-----END CERTIFICATE-----

What is puzzling me is if this is correct:

<cert> = root certificate from authority

<key> = private key

<chain> = public certificate issued by authority

Would this work?

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org