Which for agent.pem? openssl or gentls_cert
Hi to all, I'm testing mod_verto on FS v1.5.14 Debian Wheezy 64-bit . In setting up the certificates (self-signed), I followed the wiki. I encounter this WS SETUP FAILED error even on Windows Chrome inspite of all ports (443, 5061,5081,8081, 8082 and 7443) are listening. I'm suspecting a certificate setup problem. In setting up the WSS certificates, it refers to WebRTC wiki, specifically bkw's link: https://freeswitch.org/confluence/display/FREESWITCH/WebRTC#WebRTC-Aquickhow...): So far openssl is used to generate the certificates. This portion # Setup Sofia TLS the "agent.pem" is created and led me to ... https://wiki.freeswitch.org/wiki/SIP_TLS#Configuration However, gentls_cert is used to create "agent.pem"! Is there a conflict here? Which one to use? I appreciate for your guidance since I'm new to SSL/TLS. /Nandy
Follow exactly, step by step, the instruction in confluence page "freeswitch 1.6". They work and are up to date. sent from my mobile, Giovanni Maruzzelli cell: +39 347 266 56 18 On Jul 3, 2015 3:48 AM, "Nandy Dagondon" <nandy1925@gmail.com> wrote:
Hi to all,
I'm testing mod_verto on FS v1.5.14 Debian Wheezy 64-bit . In setting up the certificates (self-signed), I followed the wiki. I encounter this WS SETUP FAILED error even on Windows Chrome inspite of all ports (443, 5061,5081,8081, 8082 and 7443) are listening. I'm suspecting a certificate setup problem.
In setting up the WSS certificates, it refers to WebRTC wiki, specifically bkw's link:
https://freeswitch.org/confluence/display/FREESWITCH/WebRTC#WebRTC-Aquickhow...):
So far openssl is used to generate the certificates.
This portion # Setup Sofia TLS the "agent.pem" is created and led me to ...
https://wiki.freeswitch.org/wiki/SIP_TLS#Configuration
However, gentls_cert is used to create "agent.pem"! Is there a conflict here? Which one to use?
I appreciate for your guidance since I'm new to SSL/TLS.
/Nandy
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Recent versions of freeswitch will create the certificates for you; on the fly, but this is only for testing purposes only. agent.pem(cert and key, in this order!) and cafile.pem are used for sip wss.pem (one file, cert, key, cacert, in this order) is used form WSS. 2015-07-03 1:12 GMT-04:30 Giovanni Maruzzelli <gmaruzz@gmail.com>:
Follow exactly, step by step, the instruction in confluence page "freeswitch 1.6". They work and are up to date.
sent from my mobile, Giovanni Maruzzelli cell: +39 347 266 56 18 On Jul 3, 2015 3:48 AM, "Nandy Dagondon" <nandy1925@gmail.com> wrote:
Hi to all,
I'm testing mod_verto on FS v1.5.14 Debian Wheezy 64-bit . In setting up the certificates (self-signed), I followed the wiki. I encounter this WS SETUP FAILED error even on Windows Chrome inspite of all ports (443, 5061,5081,8081, 8082 and 7443) are listening. I'm suspecting a certificate setup problem.
In setting up the WSS certificates, it refers to WebRTC wiki, specifically bkw's link:
https://freeswitch.org/confluence/display/FREESWITCH/WebRTC#WebRTC-Aquickhow...):
So far openssl is used to generate the certificates.
This portion # Setup Sofia TLS the "agent.pem" is created and led me to ...
https://wiki.freeswitch.org/wiki/SIP_TLS#Configuration
However, gentls_cert is used to create "agent.pem"! Is there a conflict here? Which one to use?
I appreciate for your guidance since I'm new to SSL/TLS.
/Nandy
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Víctor E. Medina M. Platform Architect / Chief Infrastructure +58424 291 4561 BB #79A8AFA2 @VMCibersys
Thanks for your inputs. Somehow I managed to make it work in my intranet setup. There are some modifications in the certificate generation/installation script. I'll test it when I'll install for public access. /Nandy On Fri, Jul 3, 2015 at 10:15 PM, Victor Medina <victor.medina@cibersys.com> wrote:
Recent versions of freeswitch will create the certificates for you; on the fly, but this is only for testing purposes only.
agent.pem(cert and key, in this order!) and cafile.pem are used for sip wss.pem (one file, cert, key, cacert, in this order) is used form WSS.
2015-07-03 1:12 GMT-04:30 Giovanni Maruzzelli <gmaruzz@gmail.com>:
Follow exactly, step by step, the instruction in confluence page "freeswitch 1.6". They work and are up to date.
sent from my mobile, Giovanni Maruzzelli cell: +39 347 266 56 18 On Jul 3, 2015 3:48 AM, "Nandy Dagondon" <nandy1925@gmail.com> wrote:
Hi to all,
I'm testing mod_verto on FS v1.5.14 Debian Wheezy 64-bit . In setting up the certificates (self-signed), I followed the wiki. I encounter this WS SETUP FAILED error even on Windows Chrome inspite of all ports (443, 5061,5081,8081, 8082 and 7443) are listening. I'm suspecting a certificate setup problem.
In setting up the WSS certificates, it refers to WebRTC wiki, specifically bkw's link:
https://freeswitch.org/confluence/display/FREESWITCH/WebRTC#WebRTC-Aquickhow...):
So far openssl is used to generate the certificates.
This portion # Setup Sofia TLS the "agent.pem" is created and led me to ...
https://wiki.freeswitch.org/wiki/SIP_TLS#Configuration
However, gentls_cert is used to create "agent.pem"! Is there a conflict here? Which one to use?
I appreciate for your guidance since I'm new to SSL/TLS.
/Nandy
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Víctor E. Medina M. Platform Architect / Chief Infrastructure +58424 291 4561 BB #79A8AFA2 @VMCibersys
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Giovanni Maruzzelli
-
Nandy Dagondon
-
Victor Medina