Solved Polycom VVX 500 not provisioning

[Callinectes]

We have converted a customer from another PBX to 3CX with the assumption that being able to use their existing Polycom VVX 500 phones would work on a basic level. We have never had a problem with them before, however now we are running into an issue. We have set option 66 to the secure URL for the server and the phone is to operate via a local SBC however the phones never pull their new configs. Even if we manually update the phone and put in the HTTPS url properly the phones will not configure. In the phone logs the following is seen:

1025083658|cfg |*|00|Prov|Starting to provision
1025083658|cfg |*|00|Prov|Starting to update
1025083658|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083659|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083700|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083701|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083702|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083703|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083704|cfg |4|00|Prov|Download of master configuration file failed
1025083704|cfg |4|00|Prov|Trying to boot from existing configuration
1025083704|cfg |4|00|Prov|Update configuration failed
1025083704|cfg |4|00|Prov|Not setting device parameters since configuration was not updated.
1025083704|clist|4|00|dbSet::load:cleared load error state m_sync=<0x40>
1025083704|clist|4|00|dbSet::ioRequest:dir=<0> m_status=<true> src=<0004f2000055-directory.xml> dst=</ffs0/user/0004f2000055/0004f2000055-directory.xml> m_sync=<0x10>
1025083704|cfg |*|00|Prov|Finished updating configuration
1025083704|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083705|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083706|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083707|clist|4|00|dbSet::srv2mem:'0004f2000055-directory.xml' File transfer failed, trying to get local file
1025083707|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083708|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083709|copy |4|00|SSL_connect error SSL connect error.error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
1025083710|clist|4|00|dbSet::srv2mem:'000000000000-directory.xml' File transfer failed, trying to get local file

Is this a problem with the SSL certificate? There are no SSL cert issues seen with any modern browser.

 

[JohnS_3CX]

Please read the known limitations: https://www.3cx.com/sip-phones/polycom-soundstation-vvx-soundpoint/#h.rq5swjjthon4

They are not going to be able to complete the SSL handshake to get their provisioning if you try to use them remotely or with a cloud PBX.

 

[Callinectes]

Okay, they were provisioning fine until recently. This must be caused by a recent update?

 

[JohnS_3CX]

Yes, update 5 has increased the security level, so older phones that use less secure ciphers will unfortunately not be able to provision when the system security is enabled: