I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side. To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO. I could register with Thawte! Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client? -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h... Sent from the freeswitch-users mailing list archive at Nabble.com.
You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote:
I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side.
To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem
I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO.
I could register with Thawte!
Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client?
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA* Managing Director *T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961 *E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk *W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk
You are right, but I'm looking for trusted CAs that work on clients without any additional setup - it should serve none technical users. thanks From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Andrew Cassidy Sent: Tuesday, December 03, 2013 3:55 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Trusted CA for TLS You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote: I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side. To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO. I could register with Thawte! Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client? -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h tml Sent from the freeswitch-users mailing list archive at Nabble.com. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Andrew Cassidy BSc (Hons) MBCS SSCA Managing Director <http://c1170247.r47.cf3.rackcdn.com/emailsig.png> <mailto:info@cassidywebservices.co.uk> T 03300 100 960 <mailto:info@cassidywebservices.co.uk> F 03300 100 961 <mailto:info@cassidywebservices.co.uk> E andrew@cassidywebservices.co.uk <mailto:info@cassidywebservices.co.uk> W www.cassidywebservices.co.uk _____ No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
Ah, those pesky users! Thawte/Geotrust/Verisign/Symantec are all actually the same company, so I see no reason why if Thawte works the others shouldn't. On 3 December 2013 15:41, Assaf Dahary <adahary@gmail.com> wrote:
You are right, but I'm looking for trusted CAs that work on clients without any additional setup – it should serve none technical users.
thanks
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Andrew Cassidy *Sent:* Tuesday, December 03, 2013 3:55 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Trusted CA for TLS
You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en
On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote:
I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side.
To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem
I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO.
I could register with Thawte!
Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client?
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA*
Managing Director
*T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961
*E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk
*W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk ------------------------------
No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA* Managing Director *T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961 *E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk *W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk
Thanks, that's very helpful info. Can you tell what is the source CA of GoDaddy? From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Andrew Cassidy Sent: Tuesday, December 03, 2013 5:59 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Trusted CA for TLS Ah, those pesky users! Thawte/Geotrust/Verisign/Symantec are all actually the same company, so I see no reason why if Thawte works the others shouldn't. On 3 December 2013 15:41, Assaf Dahary <adahary@gmail.com> wrote: You are right, but I'm looking for trusted CAs that work on clients without any additional setup - it should serve none technical users. thanks From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Andrew Cassidy Sent: Tuesday, December 03, 2013 3:55 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Trusted CA for TLS You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote: I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side. To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO. I could register with Thawte! Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client? -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h tml Sent from the freeswitch-users mailing list archive at Nabble.com. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Andrew Cassidy BSc (Hons) MBCS SSCA Managing Director <mailto:info@cassidywebservices.co.uk> T 03300 100 960 <tel:03300%20100%20960> <mailto:info@cassidywebservices.co.uk> F 03300 100 961 <tel:03300%20100%20961> <mailto:info@cassidywebservices.co.uk> E andrew@cassidywebservices.co.uk <mailto:info@cassidywebservices.co.uk> W www.cassidywebservices.co.uk _____ No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13 _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Andrew Cassidy BSc (Hons) MBCS SSCA Managing Director <http://c1170247.r47.cf3.rackcdn.com/emailsig.png> <mailto:info@cassidywebservices.co.uk> T 03300 100 960 <mailto:info@cassidywebservices.co.uk> F 03300 100 961 <mailto:info@cassidywebservices.co.uk> E andrew@cassidywebservices.co.uk <mailto:info@cassidywebservices.co.uk> W www.cassidywebservices.co.uk _____ No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
They appear to have their own roots, but if you shop around you can get discounted certificates from the other vendors. RapidSSL also do a 30-day free certificate you could test with. On 3 December 2013 16:22, Assaf Dahary <adahary@gmail.com> wrote:
Thanks, that's very helpful info.
Can you tell what is the source CA of GoDaddy?
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Andrew Cassidy *Sent:* Tuesday, December 03, 2013 5:59 PM
*To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Trusted CA for TLS
Ah, those pesky users!
Thawte/Geotrust/Verisign/Symantec are all actually the same company, so I see no reason why if Thawte works the others shouldn't.
On 3 December 2013 15:41, Assaf Dahary <adahary@gmail.com> wrote:
You are right, but I'm looking for trusted CAs that work on clients without any additional setup – it should serve none technical users.
thanks
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Andrew Cassidy *Sent:* Tuesday, December 03, 2013 3:55 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Trusted CA for TLS
You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en
On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote:
I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side.
To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem
I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO.
I could register with Thawte!
Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client?
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA*
Managing Director
*T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961
*E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk
*W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk ------------------------------
No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA*
Managing Director
*T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961
*E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk
*W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk ------------------------------
No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA* Managing Director *T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961 *E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk *W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk
Godaddy doesn't work on Snom nor Yealink On 3 Dec 2013 17:43, "Assaf Dahary" <adahary@gmail.com> wrote:
You are right, but I'm looking for trusted CAs that work on clients without any additional setup – it should serve none technical users.
thanks
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Andrew Cassidy *Sent:* Tuesday, December 03, 2013 3:55 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Trusted CA for TLS
You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en
On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote:
I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side.
To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem
I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO.
I could register with Thawte!
Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client?
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA*
Managing Director
*T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961
*E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk
*W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk ------------------------------
No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On Android devices, if you go to Settings->Security->Trusted Credentials you'll see the full list of the CA root certs that come with your phone. Most clients (linphone being the notable exception) use the phone's root store and COMODO is usually in the list. However, it does depend on the type of SSL you generated. On Wed, Dec 4, 2013 at 3:51 AM, Nelson Luiz Ferraz de Camargo Penteado < bigx333@gmail.com> wrote:
Godaddy doesn't work on Snom nor Yealink On 3 Dec 2013 17:43, "Assaf Dahary" <adahary@gmail.com> wrote:
You are right, but I'm looking for trusted CAs that work on clients without any additional setup – it should serve none technical users.
thanks
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Andrew Cassidy *Sent:* Tuesday, December 03, 2013 3:55 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Trusted CA for TLS
You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en
On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote:
I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side.
To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem
I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO.
I could register with Thawte!
Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client?
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA*
Managing Director
*T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961
*E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk
*W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk ------------------------------
No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
This has been discussed several times already. The comodo positivessl and possibly other cert types work with an intermediate certificat, that you should include in the CA bundle or ultimately in the agent.pem. search the history or google for 'freeswitch ca bundle' On Dec 4, 2013 12:13 AM, "Peter" <eidevm5@gmail.com> wrote:
On Android devices, if you go to Settings->Security->Trusted Credentials you'll see the full list of the CA root certs that come with your phone.
Most clients (linphone being the notable exception) use the phone's root store and COMODO is usually in the list.
However, it does depend on the type of SSL you generated.
On Wed, Dec 4, 2013 at 3:51 AM, Nelson Luiz Ferraz de Camargo Penteado < bigx333@gmail.com> wrote:
Godaddy doesn't work on Snom nor Yealink On 3 Dec 2013 17:43, "Assaf Dahary" <adahary@gmail.com> wrote:
You are right, but I'm looking for trusted CAs that work on clients without any additional setup – it should serve none technical users.
thanks
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Andrew Cassidy *Sent:* Tuesday, December 03, 2013 3:55 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Trusted CA for TLS
You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en
On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote:
I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side.
To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem
I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO.
I could register with Thawte!
Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client?
-- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h... Sent from the freeswitch-users mailing list archive at Nabble.com.
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Andrew Cassidy BSc (Hons) MBCS SSCA*
Managing Director
*T <info@cassidywebservices.co.uk> *03300 100 960 *F <info@cassidywebservices.co.uk> *03300 100 961
*E <info@cassidywebservices.co.uk> *andrew@cassidywebservices.co.uk
*W <info@cassidywebservices.co.uk> *www.cassidywebservices.co.uk ------------------------------
No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Peter, I've tested StartSSL and COMODO in the first place because I saw them in the Android CA list. But, unfortunately I couldn't register with the Android CSipSimple over TLS even with two different FS servers. Please explain ' However, it does depend on the type of SSL you generated'. I selected the regular (single domain) CA from both StartSSL and COMODO and tested them with external ssl checker site. From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Peter Sent: Wednesday, December 04, 2013 12:11 AM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Trusted CA for TLS On Android devices, if you go to Settings->Security->Trusted Credentials you'll see the full list of the CA root certs that come with your phone. Most clients (linphone being the notable exception) use the phone's root store and COMODO is usually in the list. However, it does depend on the type of SSL you generated. On Wed, Dec 4, 2013 at 3:51 AM, Nelson Luiz Ferraz de Camargo Penteado <bigx333@gmail.com> wrote: Godaddy doesn't work on Snom nor Yealink On 3 Dec 2013 17:43, "Assaf Dahary" <adahary@gmail.com> wrote: You are right, but I'm looking for trusted CAs that work on clients without any additional setup - it should serve none technical users. thanks From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Andrew Cassidy Sent: Tuesday, December 03, 2013 3:55 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Trusted CA for TLS You can install CA certificates onto your Android device: https://support.google.com/nexus/answer/2844832?hl=en On 3 December 2013 13:11, adahary <adahary@gmail.com> wrote: I would like to share my finding about using trusted CA for TLS for registering without any additional file installation on the client side. To use a trusted CA with freeswitch I just did the following is /conf/ssl 1. cat my.key my.crt > agent.pem 2. cat chain&root > cafile.pem I could NOT register with CSipSimple over TLS when using CA from StartSSL and COMODO. I could register with Thawte! Did anyone was able to register over TLS with other trusted CA (like Godaddy and others) ? If so then with what type of client? -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Trusted-CA-for-TLS-tp7596016.h tml Sent from the freeswitch-users mailing list archive at Nabble.com. _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Andrew Cassidy BSc (Hons) MBCS SSCA Managing Director <mailto:info@cassidywebservices.co.uk> T 03300 100 960 <mailto:info@cassidywebservices.co.uk> F 03300 100 961 <mailto:info@cassidywebservices.co.uk> E andrew@cassidywebservices.co.uk <mailto:info@cassidywebservices.co.uk> W www.cassidywebservices.co.uk _____ No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13 _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _____ No virus found in this message. Checked by AVG - www.avg.com Version: 2014.0.4259 / Virus Database: 3629/6883 - Release Date: 12/01/13
participants (6)
-
adahary
-
Andrew Cassidy
-
Assaf Dahary
-
Daniel Ivanov
-
Nelson Luiz Ferraz de Camargo Penteado
-
Peter