tls

  1. 3CX IOS TLS "Service Unavailable"

    Client ------------------------------------------------------- Phone: iPhone X iOS Version: 12.4.1 Jailbreak: NO Connection: WiFi / LTE 3CX iOS App Build: 16.0.1.606 Server ------------------------------------------------------- Server: On premise accessed over internet 3CX Server Build...
  2. TLS transport for Yealink Remote Phones

    Hi, I hope this issue isn't already solved or discussed in-depth in another thread. I have a basic 3CX installation running on LightSail (v16) for a small office with 5 extensions. (Yealink T46S, T41S, W52P) (No SBC) All 5 phones/extensions were working perfectly until I had to power cycle...
  3. 3cx and Twilio Secure SIP Trunk

    Hello I've enabled SRTP for the SIP Trunk in 3cx and secure trunking in Twilio. Calls can be made and received but only last 32 seconds. Non Secure SIP call work without problem. Can I just confirm that Twilio Secure SIP will work with 3cx, or because TLS is not support they will not work as...
  4. Boschko

    Fax stops working when using TLS

    Is anyone able to use TLS with respect to fax? everytime i try to apply fax simply stops working... is this a known issue? Edit: Never mind
  5. PCI Compliance Failing - TLS v1.0

    We have a 3CX self-hosted 15.5 install running on Windows Server 2016 and have run into an issue with the new "Enable PCI Compliance SSL Transport and Ciphers" setting. Even after enabling this and restarting the server, we're still failing our PCI compliance scan. The scan comes back from our...
  6. Registering SIP trunk with TLS

    So according to an email I had with 3CX, TLS is now supported on SIP trunks. I was informed that the SIP provider must support SIPs SRV records and that I must be on v15.5 Sp6 to do so. We are using Flowroute, who supports this and are on v15.5 Sp6. What I find interesting is that I can set...
  7. twindscheif

    yealink T46x DIRECT STUN TLS + SRTP no BLF

    Hi there, i tried to configure a yealink T46S without using SBC to connect to 3CX securely via DIRECT provisioning. I customized the template to use Port tcp/5061 and SRTP in compulsory-mode. This works fine. I also noticed that i need to configure the outbound proxy pointing to the 3cx...
  8. that1guy

    TLS

    Greetings, I am getting flagged for using TLS 1.0 by PCI Compliance scans for one of my clients. We are using v15.5 SP3, which I thought uses TLS by default. Is there a way to disable the use of TLS 1.0 in favor of TLS 1.1 or 1.2?
  9. Felipe Sofia Zanuzzo

    Is 3CX Migrating from Early TLS?

    Is 3CX migrating from early TLS up to June 30, 2018, since TLS 1.0 is considered deprecated by PCI DSS?
  10. 5001 port forwarding failed PCI compliance scan?

    I recently installed an on-premises 3CX server, and opened up port 5001. During a recent PCI compliance scan, our merchant account administrator failed our scan, because "A service supporting outdated versions of TLS or SSL was detected." Some background info. If a business processes customer...
  11. BLF on Snom via TLS on 3CX Pro

    We finally got our PRO running. Everything looks great. Except.... When connecting the SNOM D725's via UDP, the phones and BLF keys work just fine. When connecting the phones via TLS, the phones do work but the BLF keys stay dark. When connecting the phones through a SBC, the phones and BLF...
  12. Solved TLS on 3CX Express Test System

    Hi there, we have a 3CX hosted test system ( 3CX Express ) running. Everything just works fine. Now I wanted to use TLS for 2 of the Snom D725 phones but I cannot get it to work. CA and server certs have been created and uploaded to server and phones, but a telnet to server port 5061 fails...
  13. Snom D7xx/TLS mode and reprovision button in 3CX 15.5

    Good evening, We faced with the problem when reprovision button (3CX Web -> Phones) doesn't work. We use TLS (Snom Phone Web -> Identity 1 -> Outbound proxy -> [FDQN]..3cx.eu:5061;transport=tls). With Outbound proxy -> [FDQN]..3cx.eu:5060 everything is fine and works well. Is there any...
  14. The remote certificate is invalid according to the validation procedure

    I know .... again this problem is posted. As this is my first post here, may I say so far I'm very impressed with the 3CX offering, especially at the 'free' level! I installed the latest (15.5) Debian ISO version and the setup went well until the outbound email setup. If someone could give me...
  15. TLSv 1.2 Cipher Suite (Diffie-Hellman vs RSA key exchanges)

    Hi, I have just installed version 15.5.1694 on Win10 and noticed that it is using Diffie-Hellman key exchange (cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) for the TLSv 1.2 connection versus RSA key exchange (cipher suite: TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d) in my other...