Toggle sidebar Toggle sidebar

IMPORTANT: Apple APNS certificate renewal reminder

Status
Not open for further replies.
Hi,

My 3cx system is having problems with Iphone clients, from the events i can see the following error:
1666633889641.png

Did a dump and i can see that Apple Push servers are replying with "Certificate Expired"

Checked if those certificates are received via updates, but no updates are available.

Can you help me how can i renew this certificates?

HW: Raspberry Pi 3B
Version: 18.0 (Build 314)

Br,
leo
 
leo212 said:
Hi,

My 3cx system is having problems with Iphone clients, from the events i can see the following error:
View attachment 32519

Did a dump and i can see that Apple Push servers are replying with "Certificate Expired"

Checked if those certificates are received via updates, but no updates are available.

Can you help me how can i renew this certificates?

HW: Raspberry Pi 3B
Version: 18.0 (Build 314)

Br,
leo
Click to expand...
You are using an unsupported platform. The raspberry PI is no longer supported for the 3cx system, especially not the Pi3, which was supported with Debian 9.

You should consider moving your 3cx system to 3cx hosted and note that you will need a 3cx SBC for IP phones, but you will not be able to use the Pi3. This is no longer supported for the 3cx SBC either.
 
  • Like
Reactions: VoIPTools and Evolute IT
Charles_3CX said:
You should consider moving your 3cx system to 3cx hosted and note that you will need a 3cx SBC for IP phones, but you will not be able to use the Pi3. This is no longer supported for the 3cx SBC either
Click to expand...
Not to drift too far off topic but does that mean the Pi 3 will stop working at some point? ETA? We have a few Pi 3Bs in the field, though our own is a Debian VM.
 
Vali_3CX said:
Can you check the version.txt in /var/lib/3cxpbx/Instance1/Bin/Cert/Apple/ folder and tell me the number there?
Click to expand...
Hello! Is there any way for a user with only web-admin access to check this? I have an iOS app user complaining of sporadic 'recovering' events and sometimes it will reconnect and sometimes it would drop. Could a user getting 'Recovering' and beeping sporadically be related to an old cert? We are currently running 18.0 Update 4 (Build 965).
 
mbelsky said:
Hello! Is there any way for a user with only web-admin access to check this? I have an iOS app user complaining of sporadic 'recovering' events and sometimes it will reconnect and sometimes it would drop. Could a user getting 'Recovering' and beeping sporadically be related to an old cert? We are currently running 18.0 Update 4 (Build 965).
Click to expand...
The cert is for push notifications of new calls. I don't think it would be related at all once the call is established. Beeping is what happens while recovering btw.
 
SweetAction said:
The cert is for push notifications of new calls. I don't think it would be related at all once the call is established. Beeping is what happens while recovering btw.
Click to expand...
Thanks! Besides for doing speedtests on mobile and wifi to ensure the connections are solid, what other steps should we take to troubleshoot the issue. We just found out that it may be affecting more than just this one user.
 
You'll want to test connectivity from the device to the 3CX server.

For example, on a windows laptop, I would setup a continuous ping from the machine to the 3CX and see if during the beeping/reconnecting phase the ping drops out.

Obviously mobile devices will have different tools, but the same idea applies - reconnecting happens what the phone (app) and server (3CX) lose connection to each other.

Speed matters only a little here - loss, latency, and jitter will play a much bigger role.
 
  • Like
Reactions: mbelsky and Vali_3CX
  • Like
Reactions: mbelsky
Vali_3CX said:
Just an important reminder:

Be sure your PBX has the latest, up-to-date Apple APNS certificate installed.

Otherwise, on October 9th, when the old certificate expires, suddenly you will get complaints "my iPhone is no longer ringing, my iPhone no longer get notifications".
Please be advised.

Thank you!
Click to expand...
Dear 3CX,

Is it possible that we can manually update/upload the certificate? I really appreciate 3CX for the past a few years for such a nice product, works great and look/feel very professional. I understand that I can migrate to a PC but if it is just a certificate, I am fine with status quo. I do not need further upgrades for future features etc. We really just need a way keeping in touch with family members while we travel internationally.

Best,
Fei
 
@feiheChicago
Hi Fei

If you're only a 3CX client user, then the certificate issue above is not your concern, you have to contact the PBX administrator to solve it.

However, if you're the PBX administrator, then I highly suggest you to contact our tech support and provide them some details about your PBX configuration and how to upgrade it.

Thanks
 
Vali_3CX said:
@feiheChicago
Hi Fei

If you're only a 3CX client user, then the certificate issue above is not your concern, you have to contact the PBX administrator to solve it.

However, if you're the PBX administrator, then I highly suggest you to contact our tech support and provide them some details about your PBX configuration and how to upgrade it.

Thanks
Click to expand...
Hi Vali,

Thanks for the message. I guess I am the admin. I have 3cx installed on RPi 4 at home. If we can keep the way it is now, I am fine with not having to upgrade/migrate. Would it be okay? Thanks for advice.

Thanks,
Fei
 
@feiheChicago I'm really not qualified to advice you on such matter, but based on my knowledge my opinion is that a StartUP, which is free, is best suited for family needs. Please have a look on the topic below and you may ask there if is suitable as a replacement for your current RPI4 home installation. As a note, I tried myself the StartUP some time ago and indeed is very quick and confortable to set it up.

https://www.3cx.com/community/threads/previous-free-offers-to-be-honored.119665/#post-557197
Hope it helps
 
  • Like
Reactions: Evolute IT
Vali_3CX said:
@feiheChicago I'm really not qualified to advice you on such matter, but based on my knowledge my opinion is that a StartUP, which is free, is best suited for family needs. Please have a look on the topic below and you may ask there if is suitable as a replacement for your current RPI4 home installation. As a note, I tried myself the StartUP some time ago and indeed is very quick and confortable to set it up.

https://www.3cx.com/community/threads/previous-free-offers-to-be-honored.119665/#post-557197
Hope it helps
Click to expand...
Vali,

Thanks for your suggestion. I looked at the cloud solution that 3CX provided. It is great but might not be for me. I feel comfortable having it hosted locally for intranet use only. Our family members all use VPN connection back to home whenever/wherever, mostly just for kids-safe/friendly-internet purpose. I guess I will have to look into Asterisk/FreePBX then.

Thanks anyway.
Best,
Fei
 
  • Like
Reactions: N_G
Vali,

I have been reviewing different options for the past few days. Here are my options:
1. StartUP is not the option. I have sip trunk running intranet as well.
2. Migration to Debian on X64. This one is a little doable, however, I wont be able to keep the same ip address for the Debian. I have so many other different servers on the previous 3cx server (RPi 4). So many things relying on the RPi 4 ip address to work properly. So, the question is, can I make it work if I have to assign different ip to Debian 3cx server. I probably need to setup sip trunk again and re-provision all soft-phones. Am I correct?
3. Asterisk/FreePBX, it is a lot of work from ground zero.
4. Can we legacy RPi user asking for the Apple APN certificate? This comes up again, as it is probably the easiest solution for us legacy users. Also, what is the future of this free license? Will it stop working soon, 1 or 2 years? If I understand correctly, we have to renew the Apple certificate every year. I tried to find out if I can request Apple certificate myself, but it seems this can only be done by developers. Am I right?

Can you be kind enough to take look at each option and give your opinions? Just want to make a correct move from here so that I do not have revisit this every so often. Appreciate your help.

Best,
Fei
 
3CX's advice/requirement is to not run anything else on the 3CX server. This would be one of those reasons why...

Softphones/apps that use the hostname should keep working once the hostname updates. You may have to redo anything using the LAN IP address of 3CX. SIP typically connects out so should be unaffected.

Updating the Apple cert doesn't fix the problem of not having any more (security and functionality) updates for 3CX, also the older versions will lose activation. Eventually the iOS/Android app will stop connecting to the old server...whether that is months or years, who can say.
 
  • Like
Reactions: Evolute IT
SteveITS said:
3CX's advice/requirement is to not run anything else on the 3CX server. This would be one of those reasons why...

Softphones/apps that use the hostname should keep working once the hostname updates. You may have to redo anything using the LAN IP address of 3CX. SIP typically connects out so should be unaffected.

Updating the Apple cert doesn't fix the problem of not having any more (security and functionality) updates for 3CX, also the older versions will lose activation. Eventually the iOS/Android app will stop connecting to the old server...whether that is months or years, who can say.
Click to expand...
Steve,

Thanks for the message on Friday late afternoon. This time around, I would not put anything else on the 3cx server if I end up with the migration approach. For the past, 3cx on RPi actually worked very well. Maybe it was because for my family only.

Everything is hard coded in ip addresses. SIP had 3cx in the loop bridging different SIPs with hard coded ip addresses, so I will need to change those as well.

Yes, you are right. That is why if we have a choice to move forward together with 3cx, I will take the cost doing the migration. If the free license is going to end anyway, I will need to take a deeper dive and go to the Asterisk/FreePBX approach. Do we have 3cx continuing support for the free license?

Best,
Fei
 
feiheChicago said:
I read that before. However, even though I know every word in the message, yet I still do not know what it means for me. Does it mean that for us who host 3cx servers ourselves, everything will be ending the latest 12/2024. The only free will be StartUP, which would not be an option for me.
Click to expand...
correct
 
Status
Not open for further replies.

Latest Posts

Members Online Now

No members online now.
Total: 217 (members: 0, guests: 217)

Forum statistics

Threads
111,831
Messages
589,277
Members
164,660
Latest member
RJenkinsROCK
3CX Logo Footer Copyright © Sitemap Privacy
Top Bottom