ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Yealink T4XG phones will not talk to FreePBX 14 over HTTPS

    IT Discussion
    yealink yealink t46g freepbx 14
    10
    61
    6.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bigbearB
      bigbear @JaredBusch
      last edited by

      @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

      ssl.conf is identical between 13 and 14.

      Obviously openssl is not because one is CentOS 6 based and the other is CentOS 7 based.

      But I have no idea how to move forward.

      Was about to volunteer to test with a couple T46 units I have but it appears you are well beyond that now.

      1 Reply Last reply Reply Quote 0
      • brianlittlejohnB
        brianlittlejohn
        last edited by

        What information do you need?

        JaredBuschJ 1 Reply Last reply Reply Quote 0
        • JaredBuschJ
          JaredBusch @brianlittlejohn
          last edited by

          @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

          What information do you need?

          First would be to determine how you got your SSL cert and that it is setup like mine.

          Then to confirm the models and firmware levels.

          Finally, the best thing would be to drop to an offline conversation and have you whitelist my IP and let me point my phone to your system to confirm your stated behavior.

          brianlittlejohnB 1 Reply Last reply Reply Quote 0
          • brianlittlejohnB
            brianlittlejohn @JaredBusch
            last edited by

            @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

            @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

            What information do you need?

            First would be to determine how you got your SSL cert and that it is setup like mine.

            Then to confirm the models and firmware levels.

            Finally, the best thing would be to drop to an offline conversation and have you whitelist my IP and let me point my phone to your system to confirm your stated behavior.

            I used a GoDaddy Certificate, installed through certificate manager and sysadmin module.

            Phone is Yealink T46G
            Firmware Version 28.81.0.110
            Hardware Version 28.2.0.128.0.0.0

            FreePBX Version Info
            -Current PBX Version: 14.0.1.14
            -Current System Version: 12.7.3-1708-1.sng7

            JaredBuschJ 1 Reply Last reply Reply Quote 0
            • JaredBuschJ
              JaredBusch @brianlittlejohn
              last edited by JaredBusch

              @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

              @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

              @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

              What information do you need?

              First would be to determine how you got your SSL cert and that it is setup like mine.

              Then to confirm the models and firmware levels.

              Finally, the best thing would be to drop to an offline conversation and have you whitelist my IP and let me point my phone to your system to confirm your stated behavior.

              I used a GoDaddy Certificate, installed through certificate manager and sysadmin module.

              Phone is Yealink T46G
              Firmware Version 28.81.0.110
              Hardware Version 28.2.0.128.0.0.0

              FreePBX Version Info
              -Current PBX Version: 14.0.1.14
              -Current System Version: 12.7.3-1708-1.sng7

              That is not the same process. I used Let's Encrypt. This is good It may narrow the issue to the LE process.

              Also did you remove the self signed and set GoDaddy as Default?

              Like this:
              0_1508509614335_402c504c-5e1d-4755-be63-8972bb7641bc-image.png

              brianlittlejohnB 1 Reply Last reply Reply Quote 0
              • brianlittlejohnB
                brianlittlejohn @JaredBusch
                last edited by

                @jaredbusch self signed is still installed, but GoDaddy set as default.

                JaredBuschJ 1 Reply Last reply Reply Quote 0
                • JaredBuschJ
                  JaredBusch @brianlittlejohn
                  last edited by

                  @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                  @jaredbusch self signed is still installed, but GoDaddy set as default.

                  Are you willing to snapshot your system and then remove the self signed?

                  brianlittlejohnB 1 Reply Last reply Reply Quote 0
                  • brianlittlejohnB
                    brianlittlejohn @JaredBusch
                    last edited by

                    @jaredbusch yes, but this weekend since it is my production system.

                    JaredBuschJ 1 Reply Last reply Reply Quote 0
                    • JaredBuschJ
                      JaredBusch @brianlittlejohn
                      last edited by

                      @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                      @jaredbusch yes, but this weekend since it is my production system.

                      I suspect it is all about the LE process since your GoDaddy cert has no issues. But that would be the only other difference to verify.

                      brianlittlejohnB DashrenderD 2 Replies Last reply Reply Quote 0
                      • brianlittlejohnB
                        brianlittlejohn @JaredBusch
                        last edited by

                        @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                        JaredBuschJ 1 Reply Last reply Reply Quote 0
                        • DashrenderD
                          Dashrender @JaredBusch
                          last edited by

                          @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                          @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                          @jaredbusch yes, but this weekend since it is my production system.

                          I suspect it is all about the LE process since your GoDaddy cert has no issues. But that would be the only other difference to verify.

                          see you say that, but there was no issue with FreePBX 13... LE worked just fine. just weird.

                          JaredBuschJ 1 Reply Last reply Reply Quote 0
                          • JaredBuschJ
                            JaredBusch @Dashrender
                            last edited by

                            @dashrender said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                            @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                            @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                            @jaredbusch yes, but this weekend since it is my production system.

                            I suspect it is all about the LE process since your GoDaddy cert has no issues. But that would be the only other difference to verify.

                            see you say that, but there was no issue with FreePBX 13... LE worked just fine. just weird.

                            But LE relies on base OS packages that may have changed something.

                            1 Reply Last reply Reply Quote 0
                            • JaredBuschJ
                              JaredBusch @brianlittlejohn
                              last edited by

                              @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                              @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                              I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                              So the problem is definitely the LE cert or cert process.

                              DashrenderD brianlittlejohnB 2 Replies Last reply Reply Quote 1
                              • DashrenderD
                                Dashrender @JaredBusch
                                last edited by

                                @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                                I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                                So the problem is definitely the LE cert or cert process.

                                I wonder if one of the intermediary certs for LE from Cent OS 7 that FreePBX is rolling?

                                https://letsencrypt.org/certificates/

                                JaredBuschJ 1 Reply Last reply Reply Quote 0
                                • brianlittlejohnB
                                  brianlittlejohn @JaredBusch
                                  last edited by

                                  @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                  @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                  @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                                  I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                                  So the problem is definitely the LE cert or cert process.

                                  We at least know where the issue is now.

                                  1 Reply Last reply Reply Quote 0
                                  • JaredBuschJ
                                    JaredBusch @Dashrender
                                    last edited by

                                    @dashrender said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                    @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                    @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                    @jaredbusch Yea, I can't think of anLE ything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                                    I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                                    So the problem is definitely the LE cert or cert process.

                                    I wonder if one of the intermediary certs for LE from Cent OS 7 that FreePBX is rolling?

                                    https://letsencrypt.org/certificates/

                                    Except I have specifically loaded the full LE cert and chain into the certificates section of the phone and it still failed. So just having everything on the phone is not enough to resolve.

                                    DashrenderD 1 Reply Last reply Reply Quote 1
                                    • DashrenderD
                                      Dashrender @JaredBusch
                                      last edited by

                                      @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                      @dashrender said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                      @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                      @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                      @jaredbusch Yea, I can't think of anLE ything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                                      I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                                      So the problem is definitely the LE cert or cert process.

                                      I wonder if one of the intermediary certs for LE from Cent OS 7 that FreePBX is rolling?

                                      https://letsencrypt.org/certificates/

                                      Except I have specifically loaded the full LE cert and chain into the certificates section of the phone and it still failed. So just having everything on the phone is not enough to resolve.

                                      Right, it's not the phone side. When I installed a godaddy cert on an exchange server a while ago, I had to install new intermediate certs on the exchange server, not the clients, to keep the clients happy with the new cert on the exchange server.

                                      So I wonder if a cert is missing on the server side, something that the older phones are looking for.

                                      I'll fully admit I don't understand the flow here, the need for intermediate certs anywhere but the actual cert servers themselves - but I recall having to do this in the past, so I'm mentioning it in case it's needed here.

                                      This would also seem to explain why it worked in Cent OS 13, but not 14, if either Cent OS people or FreePBX folks removed some intermediate cert for version 14.

                                      1 Reply Last reply Reply Quote 0
                                      • brianlittlejohnB
                                        brianlittlejohn
                                        last edited by

                                        Have you had a renewal for the LE Cert since you updated to 14?

                                        JaredBuschJ 1 Reply Last reply Reply Quote 0
                                        • JaredBuschJ
                                          JaredBusch @brianlittlejohn
                                          last edited by

                                          @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                          Have you had a renewal for the LE Cert since you updated to 14?

                                          Yes. I have also tested against another non upgraded FreePBX 14 as well as now spinning up a test system.

                                          1 Reply Last reply Reply Quote 1
                                          • RomoR
                                            Romo
                                            last edited by

                                            Sorry to resurrect an old thread

                                            @JaredBusch Did you ever get the phones to talk to the pbx (Freepbx 14) via https using the Let's Encrypt certs?

                                            JaredBuschJ 1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 3 / 4
                                            • First post
                                              Last post