SSL certificate and webrtc
Hi! I bought wildcard certificate for using it with freeswitch. Now I have hard time to install it into Freeswitch and would appreciate any help. I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct: Cert, Key and Chain(s) are all contained in a single file in this order: -----BEGIN CERTIFICATE----- <cert> -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- <key> -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- <chain> -----END CERTIFICATE----- What is puzzling me is if this is correct: <cert> = root certificate from authority <key> = private key <chain> = public certificate issued by authority Would this work?
Chain is the ca, cert is your cert On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si> wrote:
Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct: Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE----- <cert> -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- <key> -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- <chain> -----END CERTIFICATE-----
What is puzzling me is if this is correct: <cert> = root certificate from authority <key> = private key <chain> = public certificate issued by authority
Would this work?
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Before going deep, just one question if someone knows. Is mod_verto supported in windows precompiled binaries? It depends on mod_rtc, but cannot find any reference to this module in installed freeswitch. Best regards, Gregor 2016-03-05 12:11 GMT+01:00 Brian West <brian@freeswitch.org>:
Chain is the ca, cert is your cert
On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si> wrote:
Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct: Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE----- <cert> -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- <key> -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- <chain> -----END CERTIFICATE-----
What is puzzling me is if this is correct: <cert> = root certificate from authority <key> = private key <chain> = public certificate issued by authority
Would this work?
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
Got Bugs? Report them here <https://freeswitch.org/jira>! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger *CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
If an example helps, here what I have in my script to generate the .pem files for FreeSWITCH to support WebRTC: # Links to .crt and .key files ssl_dir=${script_dir}/sc_ssl_cert sc_crt=$ssl_dir/sc.crt sc_key=$ssl_dir/sc.key ca_crt=$ssl_dir/gd_bundle.crt # create the .pem files mkdir -p /usr/local/freeswitch/certs/ { cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } > /usr/local/freeswitch/certs/wss.pem # CERT, KEY AND CHAIN files { cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem # CERT file AND key file { cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem # CHAIN file or root CA On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian@freeswitch.org> wrote:
Chain is the ca, cert is your cert
On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si> wrote:
Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct: Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE----- <cert> -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- <key> -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- <chain> -----END CERTIFICATE-----
What is puzzling me is if this is correct: <cert> = root certificate from authority <key> = private key <chain> = public certificate issued by authority
Would this work?
Just for info... Everything is also in windows precompiled build, jsut use version 1.7.0 For certificate to work in windows follow this steps: - use openssl tool to generate csr and private key - buy ssl with csr previous generated - enter certificate and private key into wss.pem (look into documentation for mod_rtc). I didn't enter chain certificate (root ca) and also works. - that's it 2016-03-05 16:39 GMT+01:00 Craig Stevenson <craig@stevenson.com>:
If an example helps, here what I have in my script to generate the .pem files for FreeSWITCH to support WebRTC:
# Links to .crt and .key files ssl_dir=${script_dir}/sc_ssl_cert sc_crt=$ssl_dir/sc.crt sc_key=$ssl_dir/sc.key ca_crt=$ssl_dir/gd_bundle.crt
# create the .pem files mkdir -p /usr/local/freeswitch/certs/ { cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } > /usr/local/freeswitch/certs/wss.pem # CERT, KEY AND CHAIN files { cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem # CERT file AND key file { cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem # CHAIN file or root CA
On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian@freeswitch.org> wrote:
Chain is the ca, cert is your cert
On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si> wrote:
Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct: Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE----- <cert> -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- <key> -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- <chain> -----END CERTIFICATE-----
What is puzzling me is if this is correct: <cert> = root certificate from authority <key> = private key <chain> = public certificate issued by authority
Would this work?
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Gregor Nanger *CTO* t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485 • Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia • www.infomedia.si
participants (3)
-
Brian West
-
Craig Stevenson
-
Gregor Nanger