Yealink T4XG phones will not talk to FreePBX 14 over HTTPS

Romo

Sorry to resurrect an old thread

@JaredBusch Did you ever get the phones to talk to the pbx (Freepbx 14) via https using the Let's Encrypt certs?

JaredBusch

@romo said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

Sorry to resurrect an old thread

@JaredBusch Did you ever get the phones to talk to the pbx (Freepbx 14) via https using the Let's Encrypt certs?

Not the T4X G models. The S models work just fine.

Yealink wanted me to be their free tech support to collect all the packet captures and such. Screw that.

Romo

@JaredBusch I cannot get the T42S to talk to the pbx using https. I had to use http after reading your thread on the FreePBX forum and it started working. Hadn't even realized your trouble was only for the G models.

JaredBusch

@romo said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

@JaredBusch I cannot get the T42S to talk to the pbx using https. I had to use http after reading your thread on the FreePBX forum and it started working. Hadn't even realized your trouble was only for the G models.

I have a T42S working just fine. Also a T46S.

Is your firmware up to date?

Romo

@jaredbusch They are running 66.83.0.30

Romo

@jaredbusch I can reach https://my-pbx-url.com:1443 manually just fine, but the phones don't seem to even try to reach the URL and once I change to HTTP and its port the phones download the config file just fine.

JaredBusch

I’ve been on vacation and I’m on the road all day today and tomorrow but I will look at that I will actually be in an office that I have the S model and I can test that

Romo

@jaredbusch Great thank you =), enjoy the rest of your vacations.

JaredBusch

and an update.... if you use certbot instead of the built in certificate manager module to generate the LE certificate, everything works as expected..........

So Sangoma has something different in their implementation of Let's Encrypt.

The Sangoma implementation works fine in every browser I have ever touched. It has strictly been the Yealink phones that refuse to work right.

But I just installed certbot on my FreePBX 14 system, generated a new cert, and then copied the cert and key into Certificate Manager's "import" location. Imported the cert and made it active in apache and everything works.

https://community.freepbx.org/t/letsencrypt-certificates-two-domains-pbx-example-com-pbx5-example-com/60443/13

scottalanmiller

@JaredBusch wow, that is seriously weird.