You can also try startssl.com They have longer expirations than letsencrypt. On Mon, Nov 21, 2016 at 9:09 AM, Michael Jerris <mike@jerris.com> wrote:

there are some instructions here:

https://freeswitch.org/confluence/display/FREESWITCH/ Debian+8+Jessie#Debian8Jessie-Scriptinstallfreeswitchdemowit hverto_communicator

On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s@gmail.com> wrote:

Hello,

I have been using self generated certificates ( https://wiki.freeswitch.org/wiki/SIP_TLS) until now. Is it possible to use Letsencrypt generated certificates for TLS?

Thanks

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

Untrusted by many due to shady practices, I gave up on StartSSL! On Mon, Nov 21, 2016 at 3:11 PM Joel Serrano <joel@gogii.net> wrote:

You can also try startssl.com

They have longer expirations than letsencrypt.

On Mon, Nov 21, 2016 at 9:09 AM, Michael Jerris <mike@jerris.com> wrote:

there are some instructions here:

https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8...

On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s@gmail.com> wrote:

Hello,

I have been using self generated certificates ( https://wiki.freeswitch.org/wiki/SIP_TLS) until now. Is it possible to use Letsencrypt generated certificates for TLS?

Thanks

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

On 11/21/2016 01:10 PM, Joel Serrano wrote:

You can also try startssl.com <http://startssl.com>

They have longer expirations than letsencrypt. Several web browsers and other organizations are stopping their trust in the CA database for these certificates. This is based on them being acquired by another entity and the very real reasons to not trust that entity.

Trever

No these scripts aren't used to build the USB image. It uses self signed certs as to avoid the DNS requirements and such of lets encrypt -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of jungle Boogie Sent: Monday, November 21, 2016 6:50 PM To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Subject: Re: [Freeswitch-users] Letsencrypt and TLS On 21 November 2016 at 09:09, Michael Jerris <mike@jerris.com> wrote:

there are some instructions here:

https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#D ebian8Jessie-Scriptinstallfreeswitchdemowithverto_communicator

Are these the instructions used to build the usb freeswitch image? I don't remember what Brian called it and I don't see an obvious blog entry about it, either: https://freeswitch.org/blog/ There's lots of text that looks like it should be links on the blog. -- ------- inum: 883510009027723 sip: jungleboogie@sip2sip.info _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org

I was able to use the Letsencrypt certificate (domain is pbx.blah.com) using the following: cat /etc/letsencrypt/live/pbx.blah.com/fullchain.pem /etc/letsencrypt/live/pbx.blah.com/privkey.pem > /etc/freeswitch/conf/ssl/agent.pem The root CA was DST as shown by: openssl x509 -in /etc/letsencrypt/live/pbx.blah.com/chain.pem -noout -issuer Thus the DST_Root_CA_X3.pem was obtained from: https://www.identrust.com/certificates/trustid/root-download-x3.html The cafile was generated using: cat /etc/letsencrypt/live/pbx.blah.com/chain.pem DST_Root_CA_X3.pem > /etc/freeswitch/conf/ssl/cafile.pem Finally checked # openssl verify -CAfile cafile.pem agent.pem agent.pem: OK Hope this is helpful to somebody. On 11/21/2016 11:09 AM, Michael Jerris wrote:

there are some instructions here:

https://freeswitch.org/confluence/display/FREESWITCH/Debian+8+Jessie#Debian8...

...

On Nov 21, 2016, at 11:50 AM, Rajil Saraswat <rajil.s@gmail.com <mailto:rajil.s@gmail.com>> wrote:

Hello,

I have been using self generated certificates (https://wiki.freeswitch.org/wiki/SIP_TLS) until now. Is it possible to use Letsencrypt generated certificates for TLS?

Thanks

_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com

Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com

FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org