3cx 12.5 TLS Bria

[taras.bachinsky]

Hello.

When i trying to make call to Bria (iOS version) with TLS setup i receive:
failed to reach Extn:2280, reason Not Acceptable HereReason Unknown
in 3cx PBX log.
This happens after update Bria to newer version.

After contacting with Conterpath support i recieved next explanation of this trouble:

Your log shows that there are settings for non-encrypted media being sent along with the encrypted ones in the INVITE from your PBX. The enhanced security in Bria does not permit this. The INVITE needs to send either one or the other, but not both. In your case I assume you wish to have encryption, therefore you should prevent the PBX from including unencrypted media settings in the SDP of the INVITE. The reason the outgoing call works is because in the 200OK to Bria's invite, it DOES respond with just the encrypted media settings.

Can i fix this on 3cx PBX side ?
Thank you.

 

[bardissi]

You would need to implement secure SIP on the 3CX server.

http://www.3cx.com/blog/voip-howto/secure-sip/

 

[taras.bachinsky]

You would need to implement secure SIP on the 3CX server.

http://www.3cx.com/blog/voip-howto/secure-sip/

Secure SIP was implemented and worked fine until bria update.
In Bria new realease media encryption settings was changed to yes/no option. Older realease has "maybe" option.

With older realeases now all working fine, but with the new one is not.

I suppose that 3cx firstly trying to send unencrypted packed and recieved Not Acceptable Here.
Can i setup extension to use only secure SIP ?

 

[eagle2]

By the way CSIP simple supports TLS on Android phones, working fine