VoIP Mailing List Archives
Mailing list archives for the VoIP community |
|
View previous topic :: View next topic |
Author |
Message |
gregor at infomedia.si Guest
|
Posted: Sat Mar 05, 2016 5:14 am Post subject: [Freeswitch-users] SSL certificate and webrtc |
|
|
Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----
What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority
Would this work?
[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img] |
|
Back to top |
|
|
brian at freeswitch.org Guest
|
Posted: Sat Mar 05, 2016 6:12 am Post subject: [Freeswitch-users] SSL certificate and webrtc |
|
|
Chain is the ca, cert is your cert
On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote: | Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----
What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority
Would this work?
[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]
|
--
Brian West
brian@freeswitch.org (brian@freeswitch.org)
Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest |
|
Back to top |
|
|
gregor at infomedia.si Guest
|
Posted: Sat Mar 05, 2016 10:29 am Post subject: [Freeswitch-users] SSL certificate and webrtc |
|
|
Before going deep, just one question if someone knows.
Is mod_verto supported in windows precompiled binaries? It depends on mod_rtc, but cannot find any reference to this module in installed freeswitch.
Best regards, Gregor
[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=16cde8be-0356-4c4d-bafe-6305e9e9e04f[/img]
2016-03-05 12:11 GMT+01:00 Brian West <brian@freeswitch.org (brian@freeswitch.org)>:
--
Gregor Nanger
CTO
t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485
• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia
• www.infomedia.si |
|
Back to top |
|
|
craig at stevenson.com Guest
|
Posted: Sat Mar 05, 2016 10:41 am Post subject: [Freeswitch-users] SSL certificate and webrtc |
|
|
If an example helps, here what I have in my script to generate the .pem files for FreeSWITCH to support WebRTC:
# Links to .crt and .key files
ssl_dir=${script_dir}/sc_ssl_cert
sc_crt=$ssl_dir/sc.crt
sc_key=$ssl_dir/sc.key
ca_crt=$ssl_dir/gd_bundle.crt
# create the .pem files
mkdir -p /usr/local/freeswitch/certs/
{ cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } > /usr/local/freeswitch/certs/wss.pem # CERT, KEY AND CHAIN files
{ cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem # CERT file AND key file
{ cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem # CHAIN file or root CA
On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Quote: | Chain is the ca, cert is your cert
On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote: | Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----
What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority
Would this work?
[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]
|
|
|
|
Back to top |
|
|
gregor at infomedia.si Guest
|
Posted: Sun Mar 06, 2016 7:00 pm Post subject: [Freeswitch-users] SSL certificate and webrtc |
|
|
Just for info...
Everything is also in windows precompiled build, jsut use version 1.7.0
For certificate to work in windows follow this steps:
- use openssl tool to generate csr and private key
- buy ssl with csr previous generated
- enter certificate and private key into wss.pem (look into documentation for mod_rtc). I didn't enter chain certificate (root ca) and also works.
-
that's it
[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=7237b9d8-b4e9-416f-e86c-8af1d4d88381[/img]
2016-03-05 16:39 GMT+01:00 Craig Stevenson <craig@stevenson.com (craig@stevenson.com)>:
Quote: | If an example helps, here what I have in my script to generate the .pem files for FreeSWITCH to support WebRTC:
# Links to .crt and .key files
ssl_dir=${script_dir}/sc_ssl_cert
sc_crt=$ssl_dir/sc.crt
sc_key=$ssl_dir/sc.key
ca_crt=$ssl_dir/gd_bundle.crt
# create the .pem files
mkdir -p /usr/local/freeswitch/certs/
{ cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } > /usr/local/freeswitch/certs/wss.pem # CERT, KEY AND CHAIN files
{ cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem # CERT file AND key file
{ cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem # CHAIN file or root CA
On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Quote: | Chain is the ca, cert is your cert
On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote: | Hi!
I bought wildcard certificate for using it with freeswitch.
Now I have hard time to install it into Freeswitch and would appreciate any help.
I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----
What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority
Would this work?
[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]
|
|
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
|
--
Gregor Nanger
CTO
t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485
• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia
• www.infomedia.si |
|
Back to top |
|
|
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|