[Freeswitch-users] SSL certificate and webrtc

[Gregor Nanger]

Just for info...

Everything is also in windows precompiled build, jsut use version 1.7.0

For certificate to work in windows follow this steps:

   - use openssl tool to generate csr and private key
   - buy ssl with csr previous generated
   - enter certificate and private key into wss.pem  (look into
   documentation for mod_rtc). I didn't enter chain certificate (root ca) and
   also works.
   -

that's it

2016-03-05 16:39 GMT+01:00 Craig Stevenson <craig at stevenson.com>:

> If an example helps, here what I have in my script to generate the .pem
> files for FreeSWITCH to support WebRTC:
>
> # Links to .crt and .key files
> ssl_dir=${script_dir}/sc_ssl_cert
> sc_crt=$ssl_dir/sc.crt
> sc_key=$ssl_dir/sc.key
> ca_crt=$ssl_dir/gd_bundle.crt
>
> # create the .pem files
> mkdir -p /usr/local/freeswitch/certs/
> { cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } >
> /usr/local/freeswitch/certs/wss.pem    # CERT, KEY AND CHAIN files
> { cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem
>    # CERT file AND key file
> { cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem    # CHAIN
> file or root CA
>
>
> On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian at freeswitch.org> wrote:
>
>> Chain is the ca, cert is your cert
>>
>>
>> On Saturday, March 5, 2016, Gregor Nanger <gregor at infomedia.si> wrote:
>>
>>> Hi!
>>>
>>> I bought wildcard certificate for using it with freeswitch.
>>>
>>> Now I have hard time to install it into Freeswitch and would appreciate
>>> any help.
>>>
>>> I have private key (generated at CSR request), certificate issued by
>>> authority and root certificate from authority. Now I do not know where to
>>> enter certficate. According to documentation I assume that this is correct:
>>> Cert, Key and Chain(s) are all contained in a single file in this order:
>>>
>>> -----BEGIN CERTIFICATE-----
>>> <cert>
>>> -----END CERTIFICATE-----
>>> -----BEGIN RSA PRIVATE KEY-----
>>> <key>
>>> -----END RSA PRIVATE KEY-----
>>> -----BEGIN CERTIFICATE-----
>>> <chain>
>>> -----END CERTIFICATE-----
>>>
>>> What is puzzling me is if this is correct:
>>> <cert> = root certificate from authority
>>> <key> = private key
>>> <chain> = public certificate issued by authority
>>>
>>> Would this work?
>>>
>>
>>
>>
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>



-- 
Gregor Nanger

*CTO*
t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485
• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia
• www.infomedia.si
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20160307/c3f2fb2c/attachment-0001.html