[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Unable to establish secure connection with CUCM
Author Message
Georgi Offline
Junior Member
**

Posts: 2
Joined: Apr 2018
Reputation: 0
Post: #1
Unable to establish secure connection with CUCM
Hello community,

I am trying to deploy W56 phone with CUCM using TLS/SSL between them.
Disabling SSL the phone registers and works just fine. But when I enable secure communication I can't get the phone to register. TLS handshake can't be established.
I've done a packet capture and what I see is that we have the client and server Hello and the server requests certificate. Then the phone sends its own certificate, but the CUCM server rejects it with "Unknown CA" error.

My question is how to get the phone certificate and upload it in CUCM so I can make CUCM trust the phone? Or am I doing something wrong here? Is there someone who has this kind of setup? I would appreciate any help!

Regards!
04-16-2018 02:02 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Lucia_Yealink Offline
Super Moderator
******

Posts: 467
Joined: Aug 2016
Reputation: 5
Post: #2
RE: Unable to establish secure connection with CUCM
HI Georgi,

For your problem, you can upload your server certificate mannualy on phone WUI to solve this issue.
Please refer to the picture attach to upload the file.

.bmp  certificate.bmp (Size: 2.14 MB / Downloads: 15)

Best Regards,
Lucia
04-17-2018 03:33 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Georgi Offline
Junior Member
**

Posts: 2
Joined: Apr 2018
Reputation: 0
Post: #3
RE: Unable to establish secure connection with CUCM
(04-17-2018 03:33 AM)Lucia_Yealink Wrote:  HI Georgi,

For your problem, you can upload your server certificate mannualy on phone WUI to solve this issue.
Please refer to the picture attach to upload the file.


Best Regards,
Lucia

Hello Lucia,

I did upload the server certificate of CUCM to the phone in the Trusted Certificate section. The phone still sends the "support@yealink.com" signed certificate and CUCM rejects it.
Is there a way to make the phone use exactly the certificate I uploaded and not its own?

Thank you for your help!
Regards,
Georgi
04-18-2018 11:54 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Lucia_Yealink Offline
Super Moderator
******

Posts: 467
Joined: Aug 2016
Reputation: 5
Post: #4
RE: Unable to establish secure connection with CUCM
HI Georgi,

Please send the certificate, the level 6 syslog, config.bin and PCAP when you reproduce the issue to us.
Refer to the FAQ below to collect the files:
http://support.yealink.com/faq/faqInfo?id=707

BR
Lucia
04-20-2018 02:14 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Unable to make calls - Path Busy - Yealink W60B/W56H JacoLange 3 10,247 11-20-2021 08:06 PM
Last Post: JacoLange
  Unable to delete voicemail Emilie 2 8,969 01-10-2020 04:17 AM
Last Post: Yisroel_MongoTEL

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication