About HTTPS certificates and trust

[Travis_Yealink]

(06-01-2018 10:50 AM)TrK Wrote:  

(06-01-2018 02:19 AM)Travis Wrote:  1. The root CA is exist, so please ask server provider to send sub-CA to the phone when it asks for the authentication

Tried to new wildcard ECC cert from LE, phone cannot make provision, error in phone log:

Code:

<134>Jun  1 10:38:16 ATP [1206]: DURL<6+info  > [DCMN]I will write to file: /tmp/xxx.cfg
<134>Jun  1 10:38:17 ATP [1206]: DURL<6+info  > [DCMN]CURL Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
<134>Jun  1 10:38:17 ATP [1206]: DURL<6+info  > [DCMN]CURL Info: Unknown SSL protocol error in connection to company.com:443
<134>Jun  1 10:38:17 ATP [1206]: DURL<6+info  > [DCMN]Connect is short Cleanup curl.
<131>Jun  1 10:38:17 ATP [1206]: DURL<3+error > [DCMN]download common error, errcode:35.
<134>Jun  1 10:38:17 ATP [1206]: DURL<6+info  > [DCMN]download common error, remove file.
<131>Jun  1 10:38:17 ATP [1206]: ATP <3+error > https to file failed, code = -135, msg = , retry = 1

Dear customer,

According to your reply, I afraid the cause of this issue is the cipher you are using is not from supported 19 ciphers list. (See attachment)

Solution:
1. Change the cipher to the supported one
2. use http

By the way, we will enhance our cipher on our V84, schedule is around Sep, 2018, and if you want, please tell me what's the cipher you are using now, or provide me a PCAP, I will check for you if it's on our V84 list.

Any question, freely to let me know.

Regards,
Yealink_Travis