Solved Is there an idiot's guide to setting up teams and 3cx

[DrLloyd]

I have watched Stefan's videos, I have attempted to follow the guides. I believe I, like so many others am having a certificate issue, but I am really not sure. I am using godaddy for the cert authority, and my FQDN for teams is different from the 3cx hosted instance- in my case, the 3cx is mydemo.3cx.us, and my email domain is mydemo.contoso.com, with my teams fqdn set at teams.mydemo.contoso.com. When I go to the teams URL, I get a certificate error, NET::ERR_CERT_COMMON_NAME_INVALID, stating "the server could not prove that it is teams.mydemo.contoso.com; its security certificate is from mydemo.3cx.com."
I can deploy standard 3cx systems in my sleep, but am starting to get some noise about people wanting this functionality, but I am gonna have to double the labor to make it worthwhile!

 

[StefanW]

it appears you are targeting the wrong port or re-NAT to the default SIPs (TLS) port.

If the setup is from the ports all default then
5060 (SIP,UDP) --> mydemo.3cx.us
5061 (SIP,TCP) --> mydemo.3cx.us
5061 (SIPs,TCP) --> mydemo.3cx.us
5062 (SIPs,TCP) --> teams.mydemo.contoso.com

From the error it reads, that connecting to 5062 shows for whatever reason the cert which is expected to be seen on 5061 (and not used in the Teams integration). You could do a simple openssl connect to your 5062 port and check what is returns. If this is not teams.mydemo.contoso.com then there is a network mistake or you uploaded the wrong cert into the team's config.

 

[jeffharlan]

I admit that I am an IDIOT. I have not idea how to find these PEM files 3CX is looking for. When I get the cert from GoDaddy I get 2 .crt and 1 .pem from the apace download. So how do I end up with 2 .pem files.....

 

[jaywagener]

You should be able to simply change the extension by renaming the crt file to pem

 

[Evolute IT]

I admit that I am an IDIOT. I have not idea how to find these PEM files 3CX is looking for. When I get the cert from GoDaddy I get 2 .crt and 1 .pem from the apace download. So how do I end up with 2 .pem files.....

To be perfectly honest, if you don't know what you're doing, ask someone who does. It's easy to mess up the config or pay for something that you can't use in the end.

I'd be happy to show you the process if you'd like.

 

[Evolute IT]

You should be able to simply change the extension by renaming the crt file to pem

Not always, but yes, usually.

But don't forget to add the intermediate and root (CA-BUNDLE) **after** the certificate file (CRT) in a combined PEM file.

 

[jeffharlan]

Okay I sorted it all out... Would have been so easy for 3CX to at least explain the process instead of saying "I already have that done"..
Thanks all.