Solved HTTPS Certificate renewal Failed - Network problem

[priority]

Hello,

I have 3CX 16.0.612 running on a Windows Server 2016 (1607 - 14393.3866)
And we are receiving this error message.

HTTPS Certificate renewal Failed - Network problem
SSL certificate failed due to network conditions. Unable to reach Certificate Issuing Servers. The process to renew your certificate will start again in a couple of hours.

The main hostname cert for <HOSTNAME>.3cx.co.uk has expired on 16/08/2020 it doesn't seem to be causing any issues but I would like to get it resolved.

The server has full access to the internet and no "Outbound" ports are blocked.
The Windows Firewall is Off.
The Time and Date on the Server is Correct.

What I have just found out is that the server used to be behind a proxy server, but this configuration has been removed and there is no configuration for the Proxy in the "Internet Options" settings.

Any Idea's?

Kind Regards

Peter.

 

[Alphabetic]

What is your DNS server? Could you change to Google's (8.8.8.8) and try again?

What antivirus is on the server? Can you try with it disabled?

 

[priority]

Thanks for helping,

The Server is a Domain Controller so its DNS was set to itself. With 8.8.8.8 as the secondary.
However for testing I did set the Primary to 8.8.8.8 and the Seconday to 8.8.4.4 but this didnt work.

I did notice that when doing an nslookup I get the IPv6 Loopback address back as the DNS server ::1

> www.3cx.com
Server: localhost
Address: ::1

Non-authoritative answer:
Name: 3cx.com
Address: 104.155.98.159
Aliases: www.3cx.com

But It still looks like DNS is working correctly.

There is no antivirus on this server.

 

[Alphabetic]

It's lets encrypt issuing the certificate. What firewall have you got?

You should start by looking at those logs.

 

[JohnS_3CX]

@priority Please note that we recommend against using the PBX machine for any other purpose other than running the PBX.

Either use a dedicated machine or setup a VM for the PBX to run in.

 

[priority]

Hello,

Thanks for the help, The Firewall on the Windows Machine is disabled and the router wan firewall is a Draytek 2862. And I have disabled the firewall complelty on the router for testing.

I have also found that the system is also unable to connect to the 3cx Update Server as we get the message

"Unable to reach 3CX Updates server. Check your internet connection and try again."

It's like the 3cx software is unable to connect to the internet, but everything else on the server can.

Is there a config file in 3cx that might need to be changed?

 

[priority]

Fixed it.
The Local System Account had Proxy Settings Setup in Internet Explorer:

https://support.solarwinds.com/Succ...xy-server-on-the-machine-level?language=en_US

 

[AWS2P]

So now you can update PBX to latest V16.0.6.641

 

[JohnS_3CX]

Glad to hear it was resolved, thanks for updating the thread with your solution