Solved Invalid SSL

[Alexandros545]

Hello all,

i have setup a new PBX with a 3CX FQDN. Whenever I navigate to the management portal with local IP and 5001 port, I can see that the SSL is not working correctly.
When looking at the SSL I can see it is "invalid".

im trying to login with the FQDN and i get an error "Your connection is not private" and stays there.
i have used google chrome, brave & internet explorer.

can anyone advise on how to correct this?

thank you!

 

[Saqqara]

when you access the 3CX management console via IP you will get the message 'not secure' as you need to access the console via the fqdn / https port and not ip address - ssl certificate is assigned to the fqdn and not ip address.

When accessing via fqdn, are you trying to access the 3cx management console internally or externally ?

Please provide more info on your setup as per info here - https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/

 

[Alexandros545]

I'm using the local IP for now so i can manage the PBX console.
I'm trying the FQDN method internally and externally, nothing happens.

3CX Version Pro Annual 16.0.9
Server OS: windows server 2019 with HyperV role - 3CX debian version

 

[Alexandros545]

until yesterday, the option for cloud hosting, was enabled, even i had my self hosted instance installed on my server.
i stopped the cloud hosting service yesterday.
i think this is the problem, i think...

 

[Saqqara]

To access the server internally via fqdn you need to setup an dns record so that your fqdn points to the internal IP address of the server.

Check out https://www.3cx.com/docs/creating-fqdn-split-dns/

You may be able to setup a dns record on your firewall that points the fqdn to the internal IP address.

If you have switched off your old server, change 'Your External IP Configuration' to dynamic (Settings - Network Settings) to see if this will update the 3cx dns records. When it is working change back to fixed (if you have a fixed wan IP address)

Externally ping your fqdn address, does it resolve to the correct IP address ?

Have you opened up port 5001 on your firewall ?

Have you run the firewall test, and test it pass ?

 

[Alexandros545]

i will try the dns record and the IP trick. i have a static IP

edit:
-i dont have DNS role in my server so i cant create any record
-i cant ping the fqdn externally, but it resolves my right static IP.
-i dont have any firewall installed, only the router from my ISP, i will try to open the port there

 

[Alexandros545]

i opened the 5001 port and i successfully got in externally !!!

im trying to provision my android app externally and i get an always connecting message.
maybe i have to open more ports to the router, such as 5060 and 5090...

 

[ChrisC_3CX]

maybe i have to open more ports to the router, such as 5060 and 5090...

You will most definitely need to open TCP and UDP Port 5090 on the 3CX PBX end as these ports are used for the tunnel connection which is required for the 3CX Mobile Apps.

You can find a full list of 3CX's required ports here: https://www.3cx.com/docs/ports/

 

[Alexandros545]

i opened them and successfully connected my phone.
i think I'm ok now.
thank you all guys.

 

[ChrisC_3CX]

You're very welcome!

Please don't hesitate to post a new thread if anything else comes up!