ssl

  1. Solved Expired certificate - 3CX generated FQDN

    We have v15.5.5 with valid maintenance running We use a 3CX supplied/generated FQDN. For some reason, the certificate has expired today and was not automatically renewed. How do I get the certificate renewed?
  2. 3cx 15 ssl installation issues

    Hi, We have had to update our ssl certs for our instance of 3cx 15. I am having a massive headache tring to prepare the certs so the nginix web server is happy with them. We receieved 2 .cer files from our issuing authority (rapid ssl)_ the intermediate cert and the ssl cert. How do I convert...
  3. Change the install sequence to have the LE generation done last

    So I recently created an issue for myself when upgrading a Debian 8 install to Debian 9. When I did this I didn't have postgres installed properly causing the 3CX installer to error out when trying to restore the database. The problem is that the 3CX installer goes through the process of...
  4. 3cx SSL certificate renewel - windows 10 - Professional NFR

    Hi Guys, We are running 3cx Professional NFR 15.5, and our SSL certificate is expiring in 3 days. We use FQDN and Go Daddy certificate. I have no idea how and where to start for renewing the certificate. Do I have to create a CSR? I can see the current certificate is in nginx\instance1...
  5. seegreen

    Solved 3cx supplied SSL renewal issue

    Hi, Recently upgraded the license on an install from standard to pro (using the same 3cx FQDN). Had to restart the (Debian) server to make sure all new features became enabled, but otherwise all good. However since upgrade I'm getting errors re the SSL can't renew. This is a 3cx supplied...
  6. AustinM95

    Services Not Starting After SSL Certificate Renewal

    At around 3AM last night, my clients 3CX services failed to start after the SSL certificate was renewed. Customer had to manually restart services upon arriving at the office this morning. As you can see in the log below, the system extensions began to unregister before the SIP Server service...
  7. Windows Client SSL

    Hi All, Bit of help needed! Background setup - 3CX hosted extenrally, internal site has a VPN site to site and works fine. I have tried to implement SSIP which works great with the cert no issues. The issue i am having is that i have a remote handset setup via STUN which registers on 5061 no...
  8. SSL expired

    Our SSL on one of our PBX's has expired and not been auto renewed. We have 2 PBX's and one renewed successfully and one didn't. Do I need to do this manually?
  9. schmork

    Renewing certificate for 3cx v15 nginx webserver

    I could not find any information for my scenario to renew the ssl certificate so I thought I would post this in case it helps anyone else. If anyone knows of an easier way to do this let me know. We use a multi-domain ssl certificate that is generated from our main web server that we export to...
  10. 5001 port forwarding failed PCI compliance scan?

    I recently installed an on-premises 3CX server, and opened up port 5001. During a recent PCI compliance scan, our merchant account administrator failed our scan, because "A service supporting outdated versions of TLS or SSL was detected." Some background info. If a business processes customer...
  11. Marcel Menk

    Let's Encrypt support for custom FQDN

    Hello everyone, there is something which would make me as happy as most of the others I think, so I though it might be worth posting it here. As of right now 3CX supports Let's Encrypt certificates on the 3CX internal domains. Having this feature on the custom FQDNs as well would be great...
  12. Conference in new client causes SSL error

    Hi, In 3CX 15.5 sp2 update the create and view conference buttons in the softphone client go to the webclient. The issue we are having is that it uses the <PBXLocalAddr> setting from the provisioning file, which in our case is a local IP address. This throws a SSL cert error because the CN...
  13. mukkacow

    SMTP problems (fastmail.com

    Hello, I'm trying to set SMTP for outgoing e-mail. My e-mail provider is fastmail.com. I have tried every port they have in settings but noway to get it working (21,25,80,587,465,443). I have found this post: It's confirmed that for Google hosted PBX we can't use external smtp on these ports ...
  14. SSL Certificate Errors / Phone System down

    Hi, We got a problem with our 3CX Cloud Installation. We have PRO version with a domain in mycompany.3cx.eu When accessing our console with Chrome, it is blocked by the browser and we get a NET::ERR_CERT_DATE_INVALID We restarted the server and services, problem persists It's a Debian image...
  15. TLSv 1.2 Cipher Suite (Diffie-Hellman vs RSA key exchanges)

    Hi, I have just installed version 15.5.1694 on Win10 and noticed that it is using Diffie-Hellman key exchange (cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) for the TLSv 1.2 connection versus RSA key exchange (cipher suite: TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d) in my other...
  16. David Forster

    Updating SSL's Certs on Debian when using own FQDN

    Hi, We have recently switched from Windows to Debian. So far so good, loving the small footprint of the server and was impressed with the install, very easy, even asked for the SSL cert pfx file during install. My question is around renewing the SSL cert when the time comes (in 12 months). I...
  17. Secure SIP with REAL certificate

    Hi, I try to implement secure SIP but the only thing I can find about this is the link below from 2010, on some old 3CX version and using a selfsigned certificate. Is there an up-to-date (Version 15) manual on how to implement secure SIP with and official SSL certificate...
  18. OCWI

    Wildcard SSL with yealink

    I have reached out to 3cx support and hit dead ends. Reached out to yealink as a reseller and hit dead ends. I would like to use my own fqdn and ssl so my stuff doesnt stop working if i dont renew their insanely priced maintenance for the thousands of PBX's we plan on deploying. This is my...
  19. Install v15 FQDN SSL

    Hi Guys & Gals, We have our own Wildcard SSL cert. When installing from the ISO (following this guide https://www.3cx.com/docs/manual/installing-debian-linux-pbx/) I cannot select the option 'I have my own FQDN' (Number 8 in this guide https://www.3cx.com/docs/manual/configuration-tool/) it...
  20. UIrgent! Which FQDN is better? 3CX FQDN and own FQDN,

    Hello, We want to upgrade to 3CX V15 at the moment. We want to know the difference between 3CX FQDN and our company FQDN? Is 3CX FQDN free for forever and which one is better for performance? And also can we use our self-signed certificate? Thanks in advance.