ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Yealink T4XG phones will not talk to FreePBX 14 over HTTPS

    IT Discussion
    yealink yealink t46g freepbx 14
    10
    61
    6.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • brianlittlejohnB
      brianlittlejohn
      last edited by

      What information do you need?

      JaredBuschJ 1 Reply Last reply Reply Quote 0
      • JaredBuschJ
        JaredBusch @brianlittlejohn
        last edited by

        @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

        What information do you need?

        First would be to determine how you got your SSL cert and that it is setup like mine.

        Then to confirm the models and firmware levels.

        Finally, the best thing would be to drop to an offline conversation and have you whitelist my IP and let me point my phone to your system to confirm your stated behavior.

        brianlittlejohnB 1 Reply Last reply Reply Quote 0
        • brianlittlejohnB
          brianlittlejohn @JaredBusch
          last edited by

          @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

          @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

          What information do you need?

          First would be to determine how you got your SSL cert and that it is setup like mine.

          Then to confirm the models and firmware levels.

          Finally, the best thing would be to drop to an offline conversation and have you whitelist my IP and let me point my phone to your system to confirm your stated behavior.

          I used a GoDaddy Certificate, installed through certificate manager and sysadmin module.

          Phone is Yealink T46G
          Firmware Version 28.81.0.110
          Hardware Version 28.2.0.128.0.0.0

          FreePBX Version Info
          -Current PBX Version: 14.0.1.14
          -Current System Version: 12.7.3-1708-1.sng7

          JaredBuschJ 1 Reply Last reply Reply Quote 0
          • JaredBuschJ
            JaredBusch @brianlittlejohn
            last edited by JaredBusch

            @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

            @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

            @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

            What information do you need?

            First would be to determine how you got your SSL cert and that it is setup like mine.

            Then to confirm the models and firmware levels.

            Finally, the best thing would be to drop to an offline conversation and have you whitelist my IP and let me point my phone to your system to confirm your stated behavior.

            I used a GoDaddy Certificate, installed through certificate manager and sysadmin module.

            Phone is Yealink T46G
            Firmware Version 28.81.0.110
            Hardware Version 28.2.0.128.0.0.0

            FreePBX Version Info
            -Current PBX Version: 14.0.1.14
            -Current System Version: 12.7.3-1708-1.sng7

            That is not the same process. I used Let's Encrypt. This is good It may narrow the issue to the LE process.

            Also did you remove the self signed and set GoDaddy as Default?

            Like this:
            0_1508509614335_402c504c-5e1d-4755-be63-8972bb7641bc-image.png

            brianlittlejohnB 1 Reply Last reply Reply Quote 0
            • brianlittlejohnB
              brianlittlejohn @JaredBusch
              last edited by

              @jaredbusch self signed is still installed, but GoDaddy set as default.

              JaredBuschJ 1 Reply Last reply Reply Quote 0
              • JaredBuschJ
                JaredBusch @brianlittlejohn
                last edited by

                @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                @jaredbusch self signed is still installed, but GoDaddy set as default.

                Are you willing to snapshot your system and then remove the self signed?

                brianlittlejohnB 1 Reply Last reply Reply Quote 0
                • brianlittlejohnB
                  brianlittlejohn @JaredBusch
                  last edited by

                  @jaredbusch yes, but this weekend since it is my production system.

                  JaredBuschJ 1 Reply Last reply Reply Quote 0
                  • JaredBuschJ
                    JaredBusch @brianlittlejohn
                    last edited by

                    @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                    @jaredbusch yes, but this weekend since it is my production system.

                    I suspect it is all about the LE process since your GoDaddy cert has no issues. But that would be the only other difference to verify.

                    brianlittlejohnB DashrenderD 2 Replies Last reply Reply Quote 0
                    • brianlittlejohnB
                      brianlittlejohn @JaredBusch
                      last edited by

                      @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                      JaredBuschJ 1 Reply Last reply Reply Quote 0
                      • DashrenderD
                        Dashrender @JaredBusch
                        last edited by

                        @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                        @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                        @jaredbusch yes, but this weekend since it is my production system.

                        I suspect it is all about the LE process since your GoDaddy cert has no issues. But that would be the only other difference to verify.

                        see you say that, but there was no issue with FreePBX 13... LE worked just fine. just weird.

                        JaredBuschJ 1 Reply Last reply Reply Quote 0
                        • JaredBuschJ
                          JaredBusch @Dashrender
                          last edited by

                          @dashrender said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                          @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                          @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                          @jaredbusch yes, but this weekend since it is my production system.

                          I suspect it is all about the LE process since your GoDaddy cert has no issues. But that would be the only other difference to verify.

                          see you say that, but there was no issue with FreePBX 13... LE worked just fine. just weird.

                          But LE relies on base OS packages that may have changed something.

                          1 Reply Last reply Reply Quote 0
                          • JaredBuschJ
                            JaredBusch @brianlittlejohn
                            last edited by

                            @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                            @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                            I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                            So the problem is definitely the LE cert or cert process.

                            DashrenderD brianlittlejohnB 2 Replies Last reply Reply Quote 1
                            • DashrenderD
                              Dashrender @JaredBusch
                              last edited by

                              @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                              @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                              @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                              I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                              So the problem is definitely the LE cert or cert process.

                              I wonder if one of the intermediary certs for LE from Cent OS 7 that FreePBX is rolling?

                              https://letsencrypt.org/certificates/

                              JaredBuschJ 1 Reply Last reply Reply Quote 0
                              • brianlittlejohnB
                                brianlittlejohn @JaredBusch
                                last edited by

                                @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                @jaredbusch Yea, I can't think of anything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                                I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                                So the problem is definitely the LE cert or cert process.

                                We at least know where the issue is now.

                                1 Reply Last reply Reply Quote 0
                                • JaredBuschJ
                                  JaredBusch @Dashrender
                                  last edited by

                                  @dashrender said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                  @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                  @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                  @jaredbusch Yea, I can't think of anLE ything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                                  I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                                  So the problem is definitely the LE cert or cert process.

                                  I wonder if one of the intermediary certs for LE from Cent OS 7 that FreePBX is rolling?

                                  https://letsencrypt.org/certificates/

                                  Except I have specifically loaded the full LE cert and chain into the certificates section of the phone and it still failed. So just having everything on the phone is not enough to resolve.

                                  DashrenderD 1 Reply Last reply Reply Quote 1
                                  • DashrenderD
                                    Dashrender @JaredBusch
                                    last edited by

                                    @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                    @dashrender said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                    @jaredbusch said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                    @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                    @jaredbusch Yea, I can't think of anLE ything else that would cause it either... I haven't upgraded any of the systems that i used LE on to 14 yet to try them.

                                    I found a GoDaddy cert at a client that had a SAN that we were no longer using right now. SO I updated that DNS to point to my test PBX instance and loaded that cert onto my PBX. I changed the active certificate in SysAdmin and told the phone to provision to the new DNS name and it immediately provisioned.

                                    So the problem is definitely the LE cert or cert process.

                                    I wonder if one of the intermediary certs for LE from Cent OS 7 that FreePBX is rolling?

                                    https://letsencrypt.org/certificates/

                                    Except I have specifically loaded the full LE cert and chain into the certificates section of the phone and it still failed. So just having everything on the phone is not enough to resolve.

                                    Right, it's not the phone side. When I installed a godaddy cert on an exchange server a while ago, I had to install new intermediate certs on the exchange server, not the clients, to keep the clients happy with the new cert on the exchange server.

                                    So I wonder if a cert is missing on the server side, something that the older phones are looking for.

                                    I'll fully admit I don't understand the flow here, the need for intermediate certs anywhere but the actual cert servers themselves - but I recall having to do this in the past, so I'm mentioning it in case it's needed here.

                                    This would also seem to explain why it worked in Cent OS 13, but not 14, if either Cent OS people or FreePBX folks removed some intermediate cert for version 14.

                                    1 Reply Last reply Reply Quote 0
                                    • brianlittlejohnB
                                      brianlittlejohn
                                      last edited by

                                      Have you had a renewal for the LE Cert since you updated to 14?

                                      JaredBuschJ 1 Reply Last reply Reply Quote 0
                                      • JaredBuschJ
                                        JaredBusch @brianlittlejohn
                                        last edited by

                                        @brianlittlejohn said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                        Have you had a renewal for the LE Cert since you updated to 14?

                                        Yes. I have also tested against another non upgraded FreePBX 14 as well as now spinning up a test system.

                                        1 Reply Last reply Reply Quote 1
                                        • RomoR
                                          Romo
                                          last edited by

                                          Sorry to resurrect an old thread

                                          @JaredBusch Did you ever get the phones to talk to the pbx (Freepbx 14) via https using the Let's Encrypt certs?

                                          JaredBuschJ 1 Reply Last reply Reply Quote 1
                                          • JaredBuschJ
                                            JaredBusch @Romo
                                            last edited by

                                            @romo said in Yealink T4XG phones will not talk to FreePBX 14 over HTTPS:

                                            Sorry to resurrect an old thread

                                            @JaredBusch Did you ever get the phones to talk to the pbx (Freepbx 14) via https using the Let's Encrypt certs?

                                            Not the T4X G models. The S models work just fine.

                                            Yealink wanted me to be their free tech support to collect all the packet captures and such. Screw that.

                                            RomoR 1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 3 / 4
                                            • First post
                                              Last post