Certificate Issue

[ct8916]

Our certificate expired at the weekend and I'm trying to install the new one. The new certificate doesn't appear to be there. I will attach an image of where I saved the files and I have restarted the relevant service.

 

[Saqqara]

What do you mean the certificate doesn't appear to be there ?

You have *.crt.pem and *.key.pem files - are these the ones you uploaded to the server ?

Are these the new files , downloaded from your ssl provider ?

 

[ct8916]

What do you mean the certificate doesn't appear to be there ?

You have *.crt.pem and *.key.pem files - are these the ones you uploaded to the server ?

Are these the new files , downloaded from your ssl provider ?

When I visit our PBX site on the web browser it's still showing the old certificate.

They are downloaded from the SSL provider and then uploaded onto the pbx server in the location as shown.

 

[Charles_3CX]

Try clearing your browser cache or access using an incognito tab, certificates are cached, so you may not see the new one till the cache expires or is cleared.

 

[Saqqara]

You sure you have uploaded the latest files (Aug 2022 files) from your SSL provider ?

I would speak to your provider, just to make sure you have the correct files for 2022/23

 

[ct8916]

I have used the certificate elsewhere okay, I have checked the uploaded files and they're okay.

I have tested it on another device and still the same problem.

 

[Charles_3CX]

As @Saqqara suggested, check the certificate validity as the one you have uploaded still shows that it expired on 06/08/2022

 

[ct8916]

As @Saqqara suggested, check the certificate validity as the one you have uploaded still shows that it expired on 06/08/2022

The certificate now in use is the new one.

 

[Charles_3CX]

From a deep inspection of the system's certificate, we can see

Server CA

v:NotBefore: Aug 5 00:00:00 2021 GMT; NotAfter: Aug 5 23:59:59 2022 GMT

I cannot access it currently, and take it you are working on it?

 

[ct8916]

Hello, this is the issue though. I have followed all the instructions but when on the site it's still showing the incorrect certificate.

 

[Charles_3CX]

This is the certificate the PBX is showing currently:




Suggest checking the certificate that you have uplaoded again, and note also, you only really need one intermidate and one root with the certificate for the FQDN on the top followed by the intermidate and then the root at the botton of the pem file.

Make sure that once this has been done to restart the Nginx webserver service.

Additianal note: Ensure the private key that you are uploading is the correct one for the new certificate otherwise the Nginx service will not start back up.

 

[ct8916]

This is the certificate the PBX is showing currently:

View attachment 31416


Suggest checking the certificate that you have uplaoded again, and note also, you only really need one intermidate and one root with the certificate for the FQDN on the top followed by the intermidate and then the root at the botton of the pem file.

Make sure that once this has been done to restart the Nginx webserver service.

Additianal note: Ensure the private key that you are uploading is the correct one for the new certificate otherwise the Nginx service will not start back up.

What should the dhparam.pem be? Where is it obtained from? Does that need to be updated?

 

[Charles_3CX]

This is the diffie hellman certificate and does not need to be updated.

 

[ct8916]

Okay. Both the key and crt are from the latest certificate, I have updated them again to be sure. I can't work out why when accessing pbx.magicard.com it will not show the up to date certificate.

 

[Charles_3CX]

Have you, by any chance made any changes to the nginx.conf file located under C:\Program Files\3CX Phone System\Bin\nginx\conf, can you send me this file?

 

[ct8916]

Not that I'm aware of. File attached. thank you!!

 

[Charles_3CX]

Can you please attach it again

 

[ct8916]

got it access a google drive link as the site didn't like the upload

 

[Charles_3CX]

Can you please open a support ticket with us at 3cx technical support from your portal.3cx.com or locate a 3cx partner who can check this for you? As this will require some investigation.

You may also remove the link to the file from your reply