Solved 3CX downloads SSL error

[Mister VoIP NL]

Hi All,

Is it just me or is there something wrong with the SSL certificate for https://downloads-global.3cx.com/? Trying to install Raspberry SBC and
I get this error:

Resolving downloads-global.3cx.com (downloads-global.3cx.com)... 35.201.76.132
Connecting to downloads-global.3cx.com (downloads-global.3cx.com)|35.201.76.132|:443... connected.
ERROR: The certificate of ‘downloads-global.3cx.com’ is not trusted.
ERROR: The certificate of ‘downloads-global.3cx.com’ is not yet activated.
The certificate has not yet been activated

Thanks!

 

[ChrisC_3CX]

Hey @Mister VoIP NL,

There is no known issue with the certificate, based on the information provided it seems to be a case of the certificate not being trusted by the Pi.
• How exactly did you try to install the 3CX SBC?
• Which Raspberry Pi are you using, 3B+ or Pi4?

 

[Mister VoIP NL]

Hi Chris,

Thanks for your quick reply! Last week I just installed 5 SBC's the same way.

I have:

- Raspberry Pi 3B+
- I write the memory card with: 2018-06-27-raspbian-stretch-lite
- then I login and use the command: wget https://downloads-global.3cx.com/downloads/sbc/3cxsbc.zip -O- | sudo bash

I have some more Raspberries, did not try them. I will now, maybe it's just this Raspberry

I did use the Raspberry Pi4 link first but then I realized this was the wrong file.

 

[Mister VoIP NL]

I saw some changes in the TLS handshake, so I'm going update the Debian on the Raspberry. Lets see
what it will bring.

I had another SBC I could not update through the 3CX console (under SIP trunks) maybe that is the same issue of a too old Debian version....

 

[ChrisC_3CX]

Is the system date/time correct on the Pi?

I would recommend downloading the image from our Pi4/3CX installation guide: https://www.3cx.com/docs/installing-pbx-raspberry-pi/
and then use it to flash the SD for the 3B+. Boot the Pi and configure as per the guide, it should all work for the 3B+ as well. just make sure that you select the SBC and not the PBX during the installation wizard.

Also bear in mind that in regards to the Pi and hardware, we recommend using the Pi4 (B4 or B8).

 

[Mister VoIP NL]

Seemed there were some changes on the office firewall which blocked NTP traffic...so date/time of the raspberry was not correct. Everything is working fine now!

Thanks again.