3CX Provisioning with Certificates for Secure SIP

[3CTechnology]

Hi All

I am using Secure SIP and would like to have 3cx provisioning install trusted certs on each phone. I have a 360 extension upgrade coming up and trusted certs have been requested by client. I am testing this on our office 3cx.

I have added the cert to the 3cx provisioning folder and added the http link to the template but it does not load the cert.
I have to manually load it after the handset has provisioned.

If i paste the link into a web browser the cert downloads.

http://FQDN:5000/provisioning/xxxxxxxxx ... XPHONE.pem

Provisioning template config:

################################################################################​#######
## Certificates ##
################################################################################​#######
#Before using this parameter, you should store the desired certificate to the provisioning server.
trusted_certificates.url = http://FQDN:5000/provisioning/xxxxxxxxx ... XPHONE.pem

#trusted_certificates.delete = http://localhost/all,delete all the trusted certificates.
trusted_certificates.delete =

#Before using this parameter, you should store the desired certificate to the provisioning server.
server_certificates.url =

#server_certificates.delete = http://localhost/all, delete the server certificate.
server_certificates.delete =

################################################################################​#######

If i paste the link into a web browser the cert downloads.

http://FQDN:5000/provisioning/xxxxxxxxx ... XPHONE.pem

[Kevin_Yealink]

(10-31-2016 11:58 AM)3CTechnology Wrote:  Hi All

I am using Secure SIP and would like to have 3cx provisioning install trusted certs on each phone. I have a 360 extension upgrade coming up and trusted certs have been requested by client. I am testing this on our office 3cx.

I have added the cert to the 3cx provisioning folder and added the http link to the template but it does not load the cert.
I have to manually load it after the handset has provisioned.

If i paste the link into a web browser the cert downloads.

http://FQDN:5000/provisioning/xxxxxxxxx ... XPHONE.pem

Provisioning template config:

################################################################################​#######
## Certificates ##
################################################################################​#######
#Before using this parameter, you should store the desired certificate to the provisioning server.
trusted_certificates.url = http://FQDN:5000/provisioning/xxxxxxxxx ... XPHONE.pem

#trusted_certificates.delete = http://localhost/all,delete all the trusted certificates.
trusted_certificates.delete =

#Before using this parameter, you should store the desired certificate to the provisioning server.
server_certificates.url =

#server_certificates.delete = http://localhost/all, delete the server certificate.
server_certificates.delete =

################################################################################​#######

If i paste the link into a web browser the cert downloads.

http://FQDN:5000/provisioning/xxxxxxxxx ... XPHONE.pem

Hi

This is Kevin from Yealink support team,nice to know you.

Can you tell me the phone model and the phone firmware now?

For this issue,if you impor the cer files to the phoen manually,it can upload successfully, right?

I notice that you upload the file to the server side, and copy the URL into the template file, it is right.
Then if you import the template to the phone via Setting->Configuration->Import CFG Configuration File, can it upload successfully?
if you use auto provision with the template files, you should uplad the files to the server side, also, may i know which server you are using, http?https?

BR
Kevin

[3CTechnology]

Hi Kevin nice to meet you too.

See my answers to each question ant the end of each question.

Hi

This is Kevin from Yealink support team,nice to know you.

Can you tell me the phone model and the phone firmware now? The model is Yealink T22P F/W Version is 7.73.0.60 Latest supported 3cx firmware.

For this issue,if you impor the cer files to the phoen manually,it can upload successfully, right? Yes correct if i manually browse to the cert file and upload it it works correctly.

I notice that you upload the file to the server side, and copy the URL into the template file, it is right. Yes this is correct.
Then if you import the template to the phone via Setting->Configuration->Import CFG Configuration File, can it upload successfully? If i add the URL to the 00000000005.cfg file and inport it via cfg import it will upload the cert.
if you use auto provision with the template files, you should uplad the files to the server side, also, may i know which server you are using, http?https? It is http if i am not mistaken.
BR
Kevin

[Kevin_Yealink]

(11-01-2016 07:12 AM)3CTechnology Wrote:  Hi Kevin nice to meet you too.

See my answers to each question ant the end of each question.

Hi

This is Kevin from Yealink support team,nice to know you.

Can you tell me the phone model and the phone firmware now? The model is Yealink T22P F/W Version is 7.73.0.60 Latest supported 3cx firmware.

For this issue,if you impor the cer files to the phoen manually,it can upload successfully, right? Yes correct if i manually browse to the cert file and upload it it works correctly.

I notice that you upload the file to the server side, and copy the URL into the template file, it is right. Yes this is correct.
Then if you import the template to the phone via Setting->Configuration->Import CFG Configuration File, can it upload successfully? If i add the URL to the 00000000005.cfg file and inport it via cfg import it will upload the cert.
if you use auto provision with the template files, you should uplad the files to the server side, also, may i know which server you are using, http?https? It is http if i am not mistaken.
BR
Kevin

Dear,

Sorry for late reponse. For the issue, when you upload the cert via web interface, can it upload successfully? Please let me know.

You can send the cert to me, then i can test in my side. If you want to use https tp provision the phone, so you upload the cert. But we only support 30 certification. You can refer to the FAQ:http://support.yealink.com/faq/faqInfo?id=2

Let me know if any updtae. You also can send to my personal e-mail. Kevin@yealink.com

BR
Kevin