[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
HTTPS/SSL Error
Author Message
James_Yealink Offline
Administrator
*******

Posts: 1,159
Joined: Aug 2014
Reputation: 8
Post: #11
RE: HTTPS/SSL Error
Hi Navok,

T21P_E2 run on V80.
To T21P you can send the request of sha256 to our local distributor in Russia.

Regards,
James
04-09-2015 11:15 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
navok Offline
Junior Member
**

Posts: 5
Joined: Apr 2015
Reputation: 0
Post: #12
RE: HTTPS/SSL Error
Hi Yealink_James,
thanks for your reply.
We uses T21P, not T21P_E2.
Unfortunately, due to law restrictions, russian distributor excluding from firmware SRTP-encryption, that's why we using international firmware, not russian.
So, if russian distributor help us with sha256, we will have phones without srtp
04-10-2015 02:32 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
James_Yealink Offline
Administrator
*******

Posts: 1,159
Joined: Aug 2014
Reputation: 8
Post: #13
RE: HTTPS/SSL Error
Hi Navok,

We will send the request of adding SHA256 to our product department. They will collect all requests and consider adding it in new relase.
Currently plesae use sha1.

Regards,
James
04-10-2015 10:12 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
navok Offline
Junior Member
**

Posts: 5
Joined: Apr 2015
Reputation: 0
Post: #14
RE: HTTPS/SSL Error
Hi! I downgraded my certificates to SHA1 and received the following error with option "CommonName Validation" activated:
Apr 16 11:24:37 SIP [239]: SDL <6+info > [000] tls_connect: remote certificate: subject:/serialNumber=Qsdfsdfsdfsdf0B4YG5bOGJak/OU=GT01975439/OU=See http://www.geotrust.com/resources/cps ©15/OU=Domain Control Validated - QuickSSL® Premium/CN=example.com
Apr 16 11:24:37 SIP [239]: SDL <6+info > [000] tls_connect: remote certificate: issuer: /C=US/O=GeoTrust Inc./OU=Domain Validated SSL/CN=GeoTrust DV SSL CA
Apr 16 11:24:37 SIP [239]: SDL <3+error > [000] Common name and subject alt name doesn't match host name
Apr 16 11:24:38 SIP [239]: SDL <5+notice> [000] common_name:example.com subject_alt_name:
Apr 16 11:24:38 SIP [239]: SDL <6+info > [000] Message sent: (to dest=10.0.0.29:5061)

Domain name and IP addresses I changed in this log due to security reasons.
If I disable this option "CommonName Validation" everything goes OK.
It looks like phone trying to verify, if common name AND subject name in certificate equalent hostname, then it works OK, if this pair doesn't equalent to hostname, then it give error. But in our certificate there are no Subject name, because it is Quick SSL (not Quick SSL Premium). Can we change algorithm so, that phone will compare common name in certificate and hostname (without subject name verification) ?
(This post was last modified: 04-16-2015 07:46 PM by navok.)
04-16-2015 07:16 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
navok Offline
Junior Member
**

Posts: 5
Joined: Apr 2015
Reputation: 0
Post: #15
RE: HTTPS/SSL Error
Hi! Can Yealink-support answer to my question ?
04-27-2015 11:22 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
James_Yealink Offline
Administrator
*******

Posts: 1,159
Joined: Aug 2014
Reputation: 8
Post: #16
RE: HTTPS/SSL Error
Hi Navok,

Sorry for the late. Phone won't match both the common name and subject name.
If one of them match the host name then the authentication pass.

Can you check whether the common name match your sip server address?

Regards,
James
05-05-2015 03:05 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
navok Offline
Junior Member
**

Posts: 5
Joined: Apr 2015
Reputation: 0
Post: #17
RE: HTTPS/SSL Error
Yes, common name and sip server domain name are exactly the same
05-05-2015 10:49 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
James_Yealink Offline
Administrator
*******

Posts: 1,159
Joined: Aug 2014
Reputation: 8
Post: #18
RE: HTTPS/SSL Error
Can you please send the certificate info, sip server screenshot and the syslog you got to us? Will have a check.

Thanks,
James
05-06-2015 12:10 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Novum Networks Offline
Junior Member
**

Posts: 3
Joined: Jan 2015
Reputation: 0
Post: #19
RE: HTTPS/SSL Error
Hello James
Due to the depreciation of sha1, there are a lot of t21,t22,t26 and t28 and w52p.
When will the be enabled to support sha256.

This has to be a consideration.

Regards
02-28-2016 10:17 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  RPS API - Authentication Error jrmende5 4 1,668 03-13-2020 06:01 AM
Last Post: TeleCloud
  Autoprovisionong T4xS v83 error gasper_s 2 1,953 11-05-2018 10:25 AM
Last Post: gasper_s
  About HTTPS certificates and trust TrK 8 6,969 06-05-2018 02:14 AM
Last Post: Travis_Yealink
  HTTPS Letsencrypt T48S 66.82.0.20 vs 66.83.0.30 Jacques14623 1 1,875 05-09-2018 02:00 AM
Last Post: Travis_Yealink
  T32G Auto provisioning error with encryption Mike89 0 1,660 09-18-2017 12:47 AM
Last Post: Mike89
  HTTPS Certificates TomJagustin 2 6,631 10-27-2016 04:56 PM
Last Post: jondaley
  Upgrade firmware error from tftp boot server guillosur 1 3,900 05-05-2016 06:18 AM
Last Post: Karl_Yealink
  3CX/T4X not provisioning via HTTPS jasonsomers 1 5,087 10-27-2015 11:27 PM
Last Post: James_Yealink
  Incorrect File Format error on call send, receive or end call morrism 4 7,159 10-06-2015 07:37 AM
Last Post: morrism
  Auto Provisioning error AndyInNYC 1 6,524 09-10-2014 10:19 AM
Last Post: Wilson_Yealink

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication