Under Review 3cx V18 enables TLS on ACK message

[cristi.filip]

Hello,
I have just upgraded one of our 3cx instances to V 18.0.1880 and it seems that starting with this version the ACK messages sent in-reply to the provider 200 OK SDP messages is sent using transport = TLS even though the transport protocol on the sip trunk is set to UDP. The problem is our provider doesn't support this behavior and asked us to downgrade the 3cx version to an old one or to set the appliance to send the ACK via normal UDP without encryption. Till now I haven't found any option to disable the TLS.

Anyone else run into this problem ? Do you have an advice on this ?
Thank you.

 

[Evolute IT]

In the trunk, is "Auto Discovery" enabled? If so, go to the trunk > Options and choose "Transport : UDP" instead of "Any".

 

[YiannisH_3CX]

Hi @cristi.filip

Under your trunk options do you have the "Select which IP to use in 'Contact' (SIP) and 'Connection'(SDP) fields" option set to Use a specific address? Also who is your provider?

 

[cristi.filip]

The transport type is specifically set to UDP and also I have setup a specific ip address (that one required by our provider "Vodafone Romania" ).

 

[YiannisH_3CX]

There is an issue that we are investigating in V18 when a specific IP is specified in the "Select which IP to use in 'Contact' (SIP) and 'Connection'(SDP) fields" option. If you can configure your trunk without that option I would recommend trying that first.

 

[cristi.filip]

Thank you YiannisH. Choosing the option "Use Default Settings" on Select which IP to use in 'Contact' (SIP) and 'Connection'(SDP) fields seems to solve the problem. Now the ACK is sent without TLS.

Regards.

 

[cristian.filip]

Actually this is not an option, because not specifying the ip address result in a call without RTP (the ip address needs to be specified because we have multiple interfaces and we need to send the traffic to our provider with the specific ip).

So We have no option on this but to downgrade the appliance to V16 again ?

 

[YiannisH_3CX]

I understand. If there is no way to leave the option to default settings then if you have your V16 backup I would recommend going downgrading. Please note however that we are looking into this issue and we are planning to solve it with an update in the near future.

 

[cristian.filip]

Is there an estimation when will this issue be fixed in V18 ?

 

[YiannisH_3CX]

Is there an estimation when will this issue be fixed in V18 ?

I do not have an exact date but the current plan is a week to 10 days but if an issue comes up that could change very fast.