Hi, I've found some bug in SIP TLS Certificate file name mapping in my self-hosted 3CX trial system using 3CX FQDN setup (V16.0.5.619)
In the wizard, I'm entered case sensitive domain name e.g. Abcd-EFG.elastix.com, the system is working fine for TCP/UDP SIP also https web management get valid certificate.
However, SIP TLS registration from phone is not working which I noticed that there is "There's no valid Domain certificate/key for SIP domain" error, even there is certificate file "domain_cert_Abcd-EFG.elastix.com.pem" and "domain_key_Abcd-EFG.elastix.com.pem" in /var/lib/3cxpbx/Instance1/Bin/Cert folder.
Delete and add cert+key again from web management also doesn't help, the netstat result showing that 3CX server doesn't listen to SIP TLS TCP Port 5061.
As I recall that Linux has case sensitive file system, so I try to copy certificate file "domain_cert_Abcd-EFG.elastix.com.pem" and "domain_key_Abcd-EFG.elastix.com.pem" to "domain_cert_abcd-efg.elastix.com.pem" and "domain_key_abcd-efg.elastix.com.pem" into the same /var/lib/3cxpbx/Instance1/Bin/Cert folder.
After that I try to restart the 3CX service again, now 3CX server is listening to SIP TLS TCP Port 5061 and SIP TLS phone client can be now registered and make a call, Yeah!
I post this topic to share with other person who might get the same problem with me.
If 3CX support saw this post, Could you please proceed to fix this bug as I think my method is just a workaround which I don't sure when it come to certificate expire date and system has automatically renew the cert, do I've to copy those certificate to be in lower case file name again or not.
In the wizard, I'm entered case sensitive domain name e.g. Abcd-EFG.elastix.com, the system is working fine for TCP/UDP SIP also https web management get valid certificate.
However, SIP TLS registration from phone is not working which I noticed that there is "There's no valid Domain certificate/key for SIP domain" error, even there is certificate file "domain_cert_Abcd-EFG.elastix.com.pem" and "domain_key_Abcd-EFG.elastix.com.pem" in /var/lib/3cxpbx/Instance1/Bin/Cert folder.
Delete and add cert+key again from web management also doesn't help, the netstat result showing that 3CX server doesn't listen to SIP TLS TCP Port 5061.
As I recall that Linux has case sensitive file system, so I try to copy certificate file "domain_cert_Abcd-EFG.elastix.com.pem" and "domain_key_Abcd-EFG.elastix.com.pem" to "domain_cert_abcd-efg.elastix.com.pem" and "domain_key_abcd-efg.elastix.com.pem" into the same /var/lib/3cxpbx/Instance1/Bin/Cert folder.
After that I try to restart the 3CX service again, now 3CX server is listening to SIP TLS TCP Port 5061 and SIP TLS phone client can be now registered and make a call, Yeah!
I post this topic to share with other person who might get the same problem with me.
If 3CX support saw this post, Could you please proceed to fix this bug as I think my method is just a workaround which I don't sure when it come to certificate expire date and system has automatically renew the cert, do I've to copy those certificate to be in lower case file name again or not.
