tls

  1. SIP Trunk TLS to an AudioCodes SBC (3CX v20)

    Hello, I was able to configure a SIP Trunk between a 3CX v18 and an SBC AudioCodes Mediant 800B with TLS and SRTP. To be able to have TLS activated and working, I had to deselect the option "Enable PCI compliance SSL/SecureSIP Transport and Ciphers ..." under "Security\Anti-Hacking". This...
  2. Vodafone UK SIP TLS & SRTP

    Hiya, I've been having ongoing issues with trying to get Vodafone SIP going since the service went live over 2 weeks ago. Working alongside Vodafone's technicians we are getting close. UDP connection had no issues establishing but we need the secure TLS. From what we can tell, everything is...
  3. TLS trunk to an unsupported provider

    I have tried to enable tls under "options" and uploaded the letsencrypt .pem file. The provider is saying that they are not getting a tls connection request from my 3cx. I see this in my event log: Call or Registration to BMU_BlueSharkDigital_TG1 has failed...
  4. Unsupported 3CXPhone 6 - TLS

    Hey i try to connect my 3CXPhone 6 softphone to a freeswitch sip server on TLS. I cant get it to connect even when i import the certificate. What version of TLS the softphone uses? if its below TLS 1.2 or even SSL that would explain it.
  5. Hotdesk cannot login when RTP Encryption (SRTP) is Compulsory (Not Acceptable here error)

    Hello ! When setting up an Hotdesk and configuring the RTP Encryption (SRTP) to Compulsory via the Phone Web admin, users cannot login anymore. Dialing *77*XXX* = Not Acceptable here error Of course it is possible to de-activate the SRTP encryption. But when logged-in user then calls an...
  6. CRM Integration broken

    Hello everyone o/ Lately my company has updated its 3CX System from V16 to V18. Since that day, 3CX is unable to push data to our MySQL Database (V5.7.26). Testing the connection between those both results in an "SSL Authentication Error". From what I was able to get out of this, I think the...
  7. TLS 1.2

    Hi, by scanning the SSL-certificate I get an notification that TLS 1.2 with CBC-Blockchiffre-Modi (Cipher Block Chaining) is weak. I have allready activated the Option to TLS 1.2 does anybody know, if I can activate TLS 1.3 in 3CX? Thanks!
  8. SIP trunk does not register using proxy IP and TLS

    Hi! I encounterd the following problem using current V16.0.8.16 on Windows 10. Our provider "3" in Austria provides a proxy without a domain name (just IP address and custom port). The realm is a FQDN. IPv4 Protocol is TLS only, a certificate is provided. After configuring the SIP trunk 3CX is...
  9. Updated: Template Support for Yealink T4x SIP over TLS & SRTP using Remote STUN

    Previous Thread: https://www.3cx.com/community/threads/template-support-for-yealink-t4x-sip-over-tls-srtp-using-remote-stun.74747/ Update: Due to COVID-19 many of our employees are working from their home offices where it'd be impractical to deploy an SBC. The best solution is "Direct SIP (STUN...
  10. Solved Hosted by 3CX - TLS not connecting with valid settings

    Hi, I have followed the guide here and have been working with Brightstar, and we've hit a brick wall with enabling TLS on the trunk. https://www.3cx.com/docs/brightstar-uk-sip-trunk/ I have double checked the settings so they match the guide but the trunk won't register and I'm currently...
  11. Configuring Yealink Phones to Use TLS

    The page: https://www.3cx.com/docs/secure-sip/ Says: Go to “Security” > “Trusted Certificates”. Click the “Browse” button and upload the client certificate, e.g. “root_cert_3CXPHONE.pem”. Where do I find root_cert_3CXPHONE.pem?
  12. Secure Sip - Yealink

    Hello! This is my first post apologies if this has already been covered. I am implementing yealink provisioning with port 5061 and TLS. So far so good. The phones register fine, the only issue I have is a delay on inbound and outbound calls connecting. There is an 8-second delay before the...
  13. SIP with TLS and SRTP

    Hello, We have trouble configuring TLS and SRTP on 3CX and Yealink T46S/G. Phones: TLS on the phones works but if we set SRTP to "Compulsory" it rings but we can not answer the phone. 3CX: If we enable TLS (in the SIP trunk) the entire SIP trunk stops working (with correct .pem file). I set...
  14. Email certificate error on Passive server only

    We're in an active/passive setup and recently upgraded from 16.0.5 to 16.0.6. Emails no longer send from our passive server with the following error: I couldn't find any further information in a log file, but I may just not know where to look. Email works just fine on our Active server, so I...
  15. Enable TLS between 3cx and SIP provider

    I have been trying to implement TLS using port 5061 between 3CX and SIP provider (Flowroute) but every time I changed the transport protocol under 3cx (SIP Trunks - Options), the registration failed right away (turned from green to red). Here are my settings on SIP Provider based on the article...
  16. twindscheif

    Solved 3CX V16 - TLS SIP Trunk - No Wildcard-Support?!

    Hi there, i'm trying to change my current SIP-Trunk to use TLS + SRTP. Currently after change the registration fails immediately. My SIP-Provider told me that he cannot see my registration request. The Event-Log of 3CX states: 503 Certificate Validation Failure. I already retrieved the...
  17. Template Support for Yealink T4x SIP over TLS & SRTP using Remote STUN

    Due to COVID-19 many of our employees are working from their home offices where it'd be impractical to deploy an SBC. The best solution is "Direct SIP (STUN Remote)". The catch is that all SIP signaling and RTP audio is sent in the clear for anyone to intercept. It's trivial to create a custom...
  18. SIP Trunks Not Resolving (When using TLS/SRTP/Port 5061)

    Hello, I was following a recent similar thread here: https://www.3cx.com/community/threads/voip-trunks-not-resolving-since-updating-to-16-5-yesterday.72721/ I could not reply to the thread because it was marked as "Solved" -- However, I do not believe that is truly the case. When I'm using the...
  19. How to regenerate SIP/TLS certificate for 3cx domain?

    Hi all, I lost my certificates that were generated at install time in the Secure SIP tab (#/app/settings/security/159/secure_sip). How can I regenerate them? It's a 3CX Provided FQDN and NOT a custom domain. Is there a way to force trigger a new generation somehow? Thanks
  20. Force TLS on all clients

    Hello, I have 3 extensions configured and am using 0001 and 0002 for a test. I’ve setup both extensions to use TLS as the “SIP Transport” in the “Phone provisioning” and RTP is set to “Only Secure” I use the 3cx iphone app for the 0002 extension (used the QR code to configure it) and a...