[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
HTTPS Certificates
Author Message
TomJagustin Offline
Junior Member
**

Posts: 2
Joined: May 2015
Reputation: 0
Post: #1
HTTPS Certificates
Hi all,
I need your advice re SSL trusted certificates initially built into Yealink phones. We have requested and got signed SSL wildcard certificate for our provisioning server signed by Thawte (CA). Unlike other devices and web browsers who are able to recognize trusted certificate, Yealink phones (in this case T28p) are not able to do it. Although we can see trusted certificate from Thawte which came on the phone (see attachment), we are getting certificate error in the phone's logs. Could you comment on this?

It’s very important to us to get phones working out of the box with the built in proper trusted certificate list. In our case this is Thawte.

This is the log output for the initial HTTPS setup process:

Apr 30 19:06:31 LIBD[397]: DCMN<6+info > Connecting IP = 10.144.131.4, Port = 443
Apr 30 19:06:31 LIBD[397]: DCMN<6+info > SSL_connect (read done)
Apr 30 19:06:31 LIBD[397]: DCMN<6+info > Server Certificate verify error!
Apr 30 19:06:31 LIBD[397]: HTTP<3+error > Connect Error
Apr 30 19:06:31 ATP [397]: ATP <3+error > https to file failed, code = -3, msg = Connect Failed, retry = 3
Apr 30 19:06:31 ATP [397]: ATP <4+warnin> Download mac.cfg fail


The screen shot of the phone’s security configuration is attached along with the wireshark trace from the phone. Have a look at the packet 285 from the phone in the trace.

Thanks, Tomislav


Attached File(s) Thumbnail(s)
   

.pcap  trace_from_phone.pcap (Size: 364.17 KB / Downloads: 6)
(This post was last modified: 05-05-2015 06:40 PM by TomJagustin.)
05-05-2015 06:37 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Elaine_Yealink Offline
Super Moderator
******

Posts: 151
Joined: Aug 2014
Reputation: 4
Post: #2
RE: HTTPS Certificates
Dear Tom,

Please check your Private Message.
Thanks and regards
Elaine
05-05-2015 07:01 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
jondaley Offline
Junior Member
**

Posts: 1
Joined: Apr 2015
Reputation: 0
Post: #3
RE: HTTPS Certificates
Since the reply was sent through private message, the rest of us don't get to hear the solution.

It appears to me that the yealink phones (T32G in my case) don't know how to speak modern SSL. I am on the latest firmware. Is there any solution for these phones, other than to disable SSL?

Do you have a list of yealink phones that aren't compatible with modern https servers?
10-27-2016 04:56 PM
Find all posts by this user    like3    dislike0 Quote this message in a reply
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
Question Mutual Certificates exchange using built device built in cetificate Ricardo Martins 6 8,734 02-04-2019 06:45 PM
Last Post: Bluip_Support
  About HTTPS certificates and trust TrK 8 7,459 06-05-2018 02:14 AM
Last Post: Travis_Yealink
  HTTPS Letsencrypt T48S 66.82.0.20 vs 66.83.0.30 Jacques14623 1 2,009 05-09-2018 02:00 AM
Last Post: Travis_Yealink
  3CX Provisioning with Certificates for Secure SIP 3CTechnology 3 7,910 11-23-2016 10:00 AM
Last Post: Kevin_Yealink
  SHA1 certificates: A BIG problem lonvoice 3 5,990 04-06-2016 10:13 PM
Last Post: bsanders
  HTTPS/SSL Error nickcoons 18 36,864 02-28-2016 10:17 AM
Last Post: Novum Networks
  3CX/T4X not provisioning via HTTPS jasonsomers 1 5,218 10-27-2015 11:27 PM
Last Post: James_Yealink
Brick T19 HTTPS Autoprovisioning uzytkownik 2 5,996 08-26-2014 02:35 PM
Last Post: uzytkownik

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication