Hello,

I would like to use a commercial certificate to generate client
certificates for my TLS sip clients. I have received the following
files for my server from PositiveSSL

Root CA Certificate - AddTrustExternalCARoot.crt
Intermediate CA Certificate - COMODORSAAddTrustCA.crt
Intermediate CA Certificate - COMODORSADomainValidationSecureServerCA.crt
Your PositiveSSL Certificate - myserver_dyndns_org.crt


I did the following to create the files in freeswitch/conf/ssl

a) cat myserver.key myserver_dyndns_org.crt>agent.pem
b) cat COMODORSADomainValidationSecureServerCA.crt
COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt > cafile.pem


Testing the server works:
openssl s_client -showcerts -connect myserver.dyndns.org:5061

*****SNIP****
Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=myserver.dyndns.org
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
Limited/CN=COMODO RSA Domain Validation Secure Server CA
---
No client certificate CA names sent
---
SSL handshake has read 6108 bytes and written 442 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
*****SNIP******

How do i create the certificates for the clients now?

Thanks
Rajil

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org