Solved 3CX v15 SSL Wildcard

[Tahir]

Hi,
I am trying to renew my SSL certificate for my PBX but this time with a wildcard SSL certificate of *.domain.com.

I have downloaded the CSR tool as advised below:
Be sure to use a Windows computer for this. After downloading and extracting the CSR Generator (csrgen.zip) go to the folder and run the CREATE.BAT file.

You should get a prompt to key in your desired external FQDN, followed by a prompt to assign a password, then your company name.

When it completes, you will open the new 3CX folder inside the folder you extracted the files to, and there you will find the CSR and Key files.

However, when I generate the CSR for *.domain.com and then use the CSR with my SSL provider it says invalid domain name or something along those lines preventing me from issuing the SSL certificate request. Is there another way to achieve this?

Regards

Tahir

 

[Saqqara]

Not sure if you can use a wildcard ssl certificate for 3CX

if you look at prerequisites -
https://www.3cx.com/docs/fqdn-ssl-certificate-v15/ it states You must have an FQDN certificate (e.g. 3cx.mycompany.com)

 

[Tahir]

FQDN is something.domain.com and I am wanting to use *.domain.com for the SSL so anything before .domain.com is included.

 

[Tahir]

I have managed to resolve this, used the Digicert tool to generate a matching SSL certificate and private key, then export and uploaded via WinSCP and all seems to be working as expected.

 

[StefanW]

note, wildcard certs cannot be used in SIP TLS, just that you know that!