Solved Polycom VVX 411 Provision issue

[tregroup]

0930225412|copy |4|00|SSL_connect error Peer certificate cannot be authenticated with known CA certificates.SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
0930225412|copy |4|00|SSL_connect error Peer certificate cannot be authenticated with known CA certificates.SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
0930225412|cfg |4|00|Prov|Download of master configuration file failed

 

[cmp1]

Remove the ISRG Root X1 from the chain. should be the last cert in the chain, but verify.

Both for TLS if using, and for web.

see for reference:
https://www.3cx.com/community/threads/sips-inbound-from-flowroute-stopped-working.84604

 

[tregroup]

ISRG Root X1 Removed, and same issue


1001043240|cfg |*|00|Prov|Starting to provision
1001043240|copy |4|00|SSL_connect error Peer certificate cannot be authenticated with known CA certificates.SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
1001043241|copy |4|00|SSL_connect error Peer certificate cannot be authenticated with known CA certificates.SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
1001043241|cfg |4|00|Prov|Download of master configuration file failed
1001043241|cfg |4|00|Prov|Trying to boot from existing configuration
1001043241|cfg |4|00|Prov|Update configuration failed
1001043241|cfg |4|00|Prov|Not setting device parameters since configuration was not updated.
1001043241|clist|4|00|dbSet::load:cleared load error state m_sync=<0x40>
1001043241|clist|4|00|dbSet::ioRequest:dir=<0> m_status=<true> src=<64167f5d1724-directory.xml> dst=</ffs0/user/64167f5d1724/64167f5d1724-directory.xml> m_sync=<0x10>
1001043241|cfg |*|00|Prov|Finished updating configuration
1001043241|copy |4|00|SSL_connect error Peer certificate cannot be authenticated with known CA certificates.SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
1001043241|clist|4|00|dbSet::srv2mem:'64167f5d1724-directory.xml' File transfer failed, trying to get local file
1001043241|copy |4|00|SSL_connect error Peer certificate cannot be authenticated with known CA certificates.SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
1001043241|clist|4|00|dbSet::srv2mem:'000000000000-directory.xml' File transfer failed, trying to get local file

 

[cmp1]

Did you remove from the TLS section only, or also from the cert stored on filesystem for NGINX/Web Server ?

 

[tregroup]

Thank you its work for me

 

[JohnS_3CX]

We will mark this as solved, anyone facing this issue should read this:
https://www.3cx.com/blog/releases/lets-encrypt-expiration/