New Forum system requires email address which you used to apply for your account to replace your original username. Password stays the same.Please see this post for more details
http://forum.yealink.com/forum/showthread.php?tid=40344

Yealink Test Club has been officially launched. Please visit post below to get detail information. Come and join us!
http://forum.yealink.com/forum/announcements.php?aid=18

We just had the YMCS online and we are also working on the features plan on the future versions, in this regard we are need to hear your voice about the YMCS.
Please visit : http://forum.yealink.com/forum/showthread.php?tid=42322


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
About HTTPS certificates and trust
Author Message
TrK Offline
Junior Member
**

Posts: 11
Joined: Dec 2017
Reputation: 0
Post: #1
About HTTPS certificates and trust
Our provisioning web server have Rapid SSL RSA wildcard certificate, which is trusted by default Yealink phone. Our DHCP server send OPTION 43 with https link. Everything is working good - we unbox new phone, connect it to network and viola, not need to logon on phone`s web interface.

But our RSA certificate will be expired soon. We decide to switch to Let`sEncrypt ECC certificate. As i can see, Yealink phones by default have root LE cert "DST Root CA X3", but not have intermediate "Lets Encrypt Authority X3".

What should i do with that? Set security.trust_certificates = 0? Add this Intermediate CA certificate to Trusted?
But how new phones will get this settings without access to provisioning web server?


And another related question, about format of
Code:
trusted_certificates.url
.
What is solution when i need to add two (or three, or four) root certificate to Trusted? Should i add all to one file, like in chainfile? But this certs are from different CA.
(This post was last modified: 05-24-2018 08:53 AM by TrK.)
05-24-2018 08:41 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Messages In This Thread
About HTTPS certificates and trust - TrK - 05-24-2018 08:41 AM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
Question Mutual Certificates exchange using built device built in cetificate Ricardo Martins 6 6,549 02-04-2019 06:45 PM
Last Post: Bluip_Support
  HTTPS Letsencrypt T48S 66.82.0.20 vs 66.83.0.30 Jacques14623 1 1,142 05-09-2018 02:00 AM
Last Post: Travis_Yealink
  3CX Provisioning with Certificates for Secure SIP 3CTechnology 3 6,185 11-23-2016 10:00 AM
Last Post: Kevin_Yealink
  HTTPS Certificates TomJagustin 2 5,284 10-27-2016 04:56 PM
Last Post: jondaley
  SHA1 certificates: A BIG problem lonvoice 3 4,653 04-06-2016 10:13 PM
Last Post: bsanders
  HTTPS/SSL Error nickcoons 18 30,575 02-28-2016 10:17 AM
Last Post: Novum Networks
  3CX/T4X not provisioning via HTTPS jasonsomers 1 4,338 10-27-2015 11:27 PM
Last Post: James_Yealink
Brick T19 HTTPS Autoprovisioning uzytkownik 2 5,149 08-26-2014 02:35 PM
Last Post: uzytkownik

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication