Phones no longer support Let Encrypt

[Alcormizar]

(10-05-2021 09:58 PM)yealink@vespino.nl Wrote:  The thing is, FreePBX isn't running a certificate, the reverse proxy is. And I have already renewed that multiple times.

If your reverse proxy is using a Let's Encrypt certificate, AND your phone use an encrypted (HTTPS) connection to the phonebook via the reverse proxy, then yes you probably got it by the certificate expiration. However I think that "Only Accept Trusted Certificates" is for TLS SIP Tunnels only, not HTTPS tunnels, so in your case it probably just won't work since the CURL library (or whatever library Yealink is using) will fail and not go through with an expired root certificate.

Hope that helps!

[yealink@vespino.nl]

So this won't ever be solved I guess since Yealink isn't supporting this phone any more?

[complex1]

Looks like FreePBX is using LE certificates.
https://wiki.freepbx.org/display/FPG/Cer...User+Guide

[yealink@vespino.nl]

I know FreePBX does use LE, but like I said I'm running a reverse proxy that handles all my certificates. Traffic is forwarded to FreePBX. Before it use to work fine. OK, I could try and add a certificate to FreePBX, but don't think the issue is there since it's all up to date according to the steps I had to take provided by FreePBX.

[johnbeaumont]

I had to bite the bullet and pay for SSL certificates to fix the issue.

I don't see Yealink fixing this anytime soon.

[yealink@vespino.nl]

What phone(s) are you using? I'm using a T28 which of course is a bit outdated but for me it's still doing fine. For 25€ I might be able to buy a T42/46, but if those also have this problem...

[Alcormizar]

(10-06-2021 03:39 PM)yealink@vespino.nl Wrote:  What phone(s) are you using? I'm using a T28 which of course is a bit outdated but for me it's still doing fine. For 25€ I might be able to buy a T42/46, but if those also have this problem...

T42G,T21P E2,W60B and others are affected (I didn't actually found one that isn't affected), I have a bunch of them and need to bypass the certificate check in order to make them connect to SIP TLS servers with Let's Encrypt.

[yealink@vespino.nl]

I'm only using the phones in my private network environment so not big deal for me, but I can understand the pain when facing this in a larger corporate environment.

[bezjosh99]

i am also facing same problem, my phone no longer support encryption, can anyone here tell me how can i solve this

[yealink@vespino.nl]

You can by buying your own certificate instead of using Let's Encrypt.