[asterisk-users] CA Issued Certificates / TLS + SRTP

[Stuart Elvish]

Hi all,

Firstly, apologies if the answer to this question should be obvious.

I have just started working with SRTP and had a self-signed
certificate working perfectly. I have now purchased a CA signed
certificate but can't get it to work properly with Asterisk. I think I
have a configuration error.

The certificate is a GeoTrust Rapid SSL certificate. I have received
the my server specific crt file and also an intermediate certificate.

I am not sure of the following and would greatly appreciate if someone
could give me some guidance:
* Can I specify the intermediate and .crt files separately in the
sip.conf file? (I am thinking of a process similar to Apache where you
specify three different files; server specific certificate, chain file
and key file.)
* Should the intermediate and server specific certificates be combined
into one certificate file?
* And, is it necessary to use both my server specific certificate and
the intermediate certificate on the telephones or will the telephones
only require the server specific certificate?

My test phone is a Yealink T28P.

Many thanks.
Stuart