FreeSWITCH not presenting full TLS certificate chain

FreeSWITCH not presenting full TLS certificate chain

Hi,

I’m using a publicly trusted Comodo certificate for TLS and have created the agent.pem file with the server certificate and the full certificate chain.

However, when I run the following test:

  1. openssl s_client \
      -connect 10.2.14.4:5061 \
      -servername pbx.mydomain.com \
      -showcerts </dev/null 2>/dev/null |
    grep -c "BEGIN CERTIFICATE"
    the result is only:
    1

This suggests that FreeSWITCH is presenting only the server certificate and not the intermediate certificates included in agent.pem.

Is this the expected behaviour, or is there something wrong with my configuration or the structure of the PEM file?

I initially noticed the issue because it is affecting TLS connectivity from my Polycom phones.

FreeSWITCH version:

FreeSWITCH 1.11.1-release-26476433763-c2c59645f6 64-bit

Thanks.