Peter,

 

I've tested StartSSL and COMODO in the first place because I saw them in the Android CA list.

But, unfortunately I couldn't register with the Android CSipSimple over TLS even with two different FS servers.

 

Please explain  ' However, it does depend on the type of SSL you generated'.

 

I selected the regular (single domain) CA from both StartSSL and COMODO and tested them with external ssl checker site.

 

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Peter
Sent: Wednesday, December 04, 2013 12:11 AM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Trusted CA for TLS

 

On Android devices, if you go to Settings->Security->Trusted Credentials you'll see the full list of the CA root certs that come with your phone.

Most clients (linphone being the notable exception) use the phone's root store and COMODO is usually in the list.

However, it does depend on the type of SSL you generated.

 

On Wed, Dec 4, 2013 at 3:51 AM, Nelson Luiz Ferraz de Camargo Penteado <bigx333@gmail.com> wrote:

Godaddy doesn't work on Snom nor Yealink

On 3 Dec 2013 17:43, "Assaf Dahary" <adahary@gmail.com> wrote:

You are right, but I'm looking for trusted CAs that work on clients without any additional setup – it should serve none technical users.

 

thanks

 

From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Andrew Cassidy
Sent: Tuesday, December 03, 2013 3:55 PM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users] Trusted CA for TLS

 

You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en

 

On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote:

I would like to share my finding about using trusted CA for TLS for
registering without any additional file installation on the client side.

To use a trusted CA with freeswitch I just did the following is /conf/ssl
1. cat my.key my.crt > agent.pem
2. cat chain&root  > cafile.pem

I could NOT register with CSipSimple over TLS when using CA from StartSSL
and COMODO.

I could register with Thawte!

Did anyone was able to register over TLS with other trusted CA (like Godaddy
and others) ?
If so then with what type of client?




--
View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.html
Sent from the freeswitch-users mailing list archive at Nabble.com.

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



 

--
Andrew Cassidy BSc (Hons) MBCS SSCA

Managing Director


No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

 


No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13