3CX Android Client secure SIP / TLS

[mobilowa]

For Secure SIP and Secure RTP server side certificate and key are configured correctly

This certificate is issued by commerial CA "COMODO RSA Domain Validation Secure Server CA" with Domain Varification

Certificate's common name as same as In Network interface for registration and provisioning and Internal and External IP addresses of PABX
This is internally and externally routable public FQDN (with split DNS)
as uc.unxxxxxe.net

Same certificate also has Subject Alternative Names as
uc.unxxxxxe.net
www.uc.unxxxxxe.net

Windows 3CX clients work fine Secure SIP (TLS )and Secure RTP - No issues

But Android 3CX client failed to register when SIP transport is set to TLS and secure RTP !!



Android client side log says as ": SSL certificate verification error"
Could you please provide help why Android 3CX clients have issues with SSL certificate verification
Where Windows 3CX clients verify and register without any issues using same server side cert?

Tried on 3 android phone and issue is the same

I believe development team , needs to fix error of "PJSIP_TLS_ECERTVERIF" that Android 3CX client throwing when tries to verify server certificate issued by commercial CA

When I try n open PABX admin console from Android builtin web browser with
https://uc.unxxxxxe.net:5001
I have NO certification verification issues , can open fine !
Because same certificate is used for 3CX Secure SIP /Secure RTP

3CX Android Client Version : 15.5.345.643 (latest)
PABX Version : 15.5.15502.6 (latest)


Full log trace

10-30 21:52:15.966 7498 13985 I 3CXPhone15: (thread 13985) 21:52:15.966 tlsc0xdb262c14 TLS connect() error: SSL certificate verification error (PJSIP_TLS_ECERTVERIF)

10-30 21:52:15.966  7498 13985 I 3CXPhone15: (thread 13985) 21:52:15.966  tsx0xc345a864  Failed to send Request msg REGISTER/cseq=19788 (tdta0xc3317064)! err=171173 (SSL certificate verification error (PJSIP_TLS_ECERTVERIF))

10-30 21:52:15.966  7498 13985 I 3CXPhone15: (thread 13985) 21:52:15.966    pjsua_acc.c  ..SIP registration failed, status=503 (SSL certificate verification error (PJSIP_TLS_ECERTVERIF))

10-30 21:52:15.966  7498 13985 I 3CXPhone15: (thread 13985) 21:52:15.966 PjsuaCallbacks  ..******* ON_REG_STATE2 ********* acc_id 2, status 0, code 503, expiration 120

10-30 21:52:15.966  7498 13985 I 3CXPhone15: (thread 13985) 21:52:15.966      PjsipLine  ..******* ON_REG_STATE2  10

10-30 21:52:15.968  7498  7498 I 3CXPhone.Biz: (thread 7498) 21:52:15:968 line unregistered, handle = ffffffffc34e28d8, code 503

10-30 21:52:15.968  7498  7498 I 3CXPhone.DialerFragment: (thread 7498) 21:52:15:968 setBurstStatus: Register Failed, Service unavailable

10-30 21:52:15.968  7498  7498 D 3CXPhone.DialerFragment: (thread 7498) 21:52:15:968 setDialerState NO_CALL_NO_NUMBER, isShown: false, cur slot = 0, cur state = NO_CALL_NO_NUMBER

10-30 21:52:15.969  7498  7498 D 3CXPhone.NotificationHelper: (thread 7498) 21:52:15:969 updateCallNotification

10-30 21:52:15.970  7498 13985 I 3CXPhone15: (thread 13985) 21:52:15.970 tlsc0xdb262c14  TLS transport destroyed with reason 171173: SSL certificate verification error (PJSIP_TLS_ECERTVERIF)