Sponsor: VoiceMeUp - Corporate & Wholesale VoIP Services

VoIP Mailing List Archives
Mailing list archives for the VoIP community
 SearchSearch 

[Freeswitch-users] SSL certificate and webrtc


 
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users
View previous topic :: View next topic  
Author Message
gregor at infomedia.si
Guest





PostPosted: Sat Mar 05, 2016 5:14 am    Post subject: [Freeswitch-users] SSL certificate and webrtc Reply with quote

Hi!


I bought wildcard certificate for using it with freeswitch. 


Now I have hard time to install it into Freeswitch and would appreciate any help.


I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
  
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----


What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority


Would this work?


[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]
Back to top
brian at freeswitch.org
Guest





PostPosted: Sat Mar 05, 2016 6:12 am    Post subject: [Freeswitch-users] SSL certificate and webrtc Reply with quote

Chain is the ca, cert is your cert

On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote:
Hi!


I bought wildcard certificate for using it with freeswitch. 


Now I have hard time to install it into Freeswitch and would appreciate any help.


I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
  
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----


What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority


Would this work?


[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]


--

Brian West
brian@freeswitch.org (brian@freeswitch.org)


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:+19184209001 | F:+19184209002 | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest
Back to top
gregor at infomedia.si
Guest





PostPosted: Sat Mar 05, 2016 10:29 am    Post subject: [Freeswitch-users] SSL certificate and webrtc Reply with quote

Before going deep, just one question if someone knows.


Is mod_verto supported in windows precompiled binaries? It depends on mod_rtc, but cannot find any reference to this module in installed freeswitch.




Best regards, Gregor
[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=16cde8be-0356-4c4d-bafe-6305e9e9e04f[/img]

2016-03-05 12:11 GMT+01:00 Brian West <brian@freeswitch.org (brian@freeswitch.org)>:
Quote:
Chain is the ca, cert is your cert

On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote:
Hi!


I bought wildcard certificate for using it with freeswitch. 


Now I have hard time to install it into Freeswitch and would appreciate any help.


I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
  
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----


What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority


Would this work?


[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]




--

Brian West
brian@freeswitch.org (brian@freeswitch.org)


Twitter: @FreeSWITCH , @briankwest
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com
Got Bugs? Report them here! | Reddit: /r/freeswitch
T:[url=tel:%2B19184209001]+19184209001[/url] | F:[url=tel:%2B19184209002]+19184209002[/url] | M:+1918424WEST (9378)
iNUM:+883 5100 1420 9001 | ISN:410*543 | Skype:briankwest










_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org




--
Gregor Nanger 
CTO
t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485
• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia
www.infomedia.si
Back to top
craig at stevenson.com
Guest





PostPosted: Sat Mar 05, 2016 10:41 am    Post subject: [Freeswitch-users] SSL certificate and webrtc Reply with quote

If an example helps, here what I have in my script to generate the .pem files for FreeSWITCH to support WebRTC:

# Links to .crt and .key files
ssl_dir=${script_dir}/sc_ssl_cert
sc_crt=$ssl_dir/sc.crt
sc_key=$ssl_dir/sc.key
ca_crt=$ssl_dir/gd_bundle.crt


# create the .pem files
mkdir -p /usr/local/freeswitch/certs/
{ cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } > /usr/local/freeswitch/certs/wss.pem    # CERT, KEY AND CHAIN files
{ cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem    # CERT file AND key file
{ cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem    # CHAIN file or root CA




On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Quote:
Chain is the ca, cert is your cert

On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote:
Hi!


I bought wildcard certificate for using it with freeswitch. 


Now I have hard time to install it into Freeswitch and would appreciate any help.


I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
  
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----


What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority


Would this work?


[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]





Back to top
gregor at infomedia.si
Guest





PostPosted: Sun Mar 06, 2016 7:00 pm    Post subject: [Freeswitch-users] SSL certificate and webrtc Reply with quote

Just for info...


Everything is also in windows precompiled build, jsut use version 1.7.0


For certificate to work in windows follow this steps:
  • use openssl tool to generate csr and private key
  • buy ssl with csr previous generated
  • enter certificate and private key into wss.pem  (look into documentation for mod_rtc). I didn't enter chain certificate (root ca) and also works.

that's it

[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=7237b9d8-b4e9-416f-e86c-8af1d4d88381[/img]

2016-03-05 16:39 GMT+01:00 Craig Stevenson <craig@stevenson.com (craig@stevenson.com)>:
Quote:
If an example helps, here what I have in my script to generate the .pem files for FreeSWITCH to support WebRTC:

# Links to .crt and .key files
ssl_dir=${script_dir}/sc_ssl_cert
sc_crt=$ssl_dir/sc.crt
sc_key=$ssl_dir/sc.key
ca_crt=$ssl_dir/gd_bundle.crt


# create the .pem files
mkdir -p /usr/local/freeswitch/certs/
{ cat ${sc_crt}; cat ${sc_key}; cat ${ca_crt}; } > /usr/local/freeswitch/certs/wss.pem    # CERT, KEY AND CHAIN files
{ cat ${sc_crt}; cat ${sc_key}; } > /usr/local/freeswitch/certs/agent.pem    # CERT file AND key file
{ cat ${ca_crt}; } > /usr/local/freeswitch/certs/cafile.pem    # CHAIN file or root CA




On Sat, Mar 5, 2016 at 4:11 AM, Brian West <brian@freeswitch.org (brian@freeswitch.org)> wrote:
Quote:
Chain is the ca, cert is your cert

On Saturday, March 5, 2016, Gregor Nanger <gregor@infomedia.si (gregor@infomedia.si)> wrote:
Quote:
Hi!


I bought wildcard certificate for using it with freeswitch. 


Now I have hard time to install it into Freeswitch and would appreciate any help.


I have private key (generated at CSR request), certificate issued by authority and root certificate from authority. Now I do not know where to enter certficate. According to documentation I assume that this is correct:
Cert, Key and Chain(s) are all contained in a single file in this order:
  
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<key>
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
<chain>
-----END CERTIFICATE-----


What is puzzling me is if this is correct:
<cert> = root certificate from authority
<key> = private key
<chain> = public certificate issued by authority


Would this work?


[img]http://t.sidekickopen42.com/e1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v5dbp0W3MPnzY4XrbSMW8q-f_43LvrVvW59BB4r1k1H6H0?si=5036397111279616&pi=c1746309-37d2-4b05-8f34-0e8d101de61e[/img]










_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org (consulting@freeswitch.org)
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org (FreeSWITCH-users@lists.freeswitch.org)
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org




--
Gregor Nanger 
CTO
t./f.: 00386 (0) 7 6000 308/309 • m:. 00386 (0)41 756485
• Infomedia d.o.o. • Jerebova 3, Novo mesto, Slovenia
www.infomedia.si
Back to top
Display posts from previous:   
Post new topic   Reply to topic    VoIP Mailing List Archives Forum Index -> freeSWITCH Users All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

VoiceMeUp - Corporate & Wholesale VoIP Services