Problem logging in to Web Client

[boxas]

Hello, I have 3cx 4SC Free system, which is self-hosted. I have had this system for several years, and it was updated to version 20 in April 2024, and is currently on update 3.

The problem is that I can no longer log in to the Web Client to manage the system. Specifically:
- When I log in from my local network using the server's IP address, I get a red banner saying that I need a secure connection, and I cannot progress any further. Notably, this was working until about late Fall.
- When I try to use the FQDN, XXXXX.3cx.gr, the site doesn't load; when I ping this, I see that it points to the wrong IP address. The IP is dynamic, so apparently the DNS doesn't update.
- When I edit the hosts file to force routing to the correct IP, I get the message that the SSL certificate has expired. If I ignore this "risk" and continue, I get the login page without a red banner on top. However, I still can't login as the page simply refreshes. I know I am entering the correct credentials as I don't get an "incorrect username or password" error.

I have checked that ports 443, 5060, 5061, and 5090 are listening and open. I can also reach from the server all obvious services (e.g., activate.3cx.com and discoverv4.3cx.com). I haven't configured Split DNS, but this is unlikely to be the problem, as I can override the DNS by using the hosts file. Instead, it seems that the problems are that (1) the SSL certificate didn't automatically renew, as it previously did for many years, and (2) that the DNS doesn't update to the new dynamic IP. And possibly something else I can't think of.

Does anyone have any suggestions?

 

[SteveITS]

Specifically to your question you should be able to use https://ip-addr and bypass the warning in your browser that the cert is invalid.

3CX should detect a dynamic IP change if it's set to a dynamic IP in its network settings and the license is active. The TTL on a Pro license is 6 hours. Not sure if the legacy Free is that or different. If it's been that long you could try restarting the services or the server.

FYI there's info here about Free: https://www.3cx.com/blog/news/2025-strategy/

 

[boxas]

Specifically to your question you should be able to use https://ip-addr and bypass the warning in your browser that the cert is invalid.

3CX should detect a dynamic IP change if it's set to a dynamic IP in its network settings and the license is active. The TTL on a Pro license is 6 hours. Not sure if the legacy Free is that or different. If it's been that long you could try restarting the services or the server.

FYI there's info here about Free: https://www.3cx.com/blog/news/2025-strategy/

Thanks for the suggestion Steve. I have tried using https://ip-addr, but unfortunately it doesn't work. On the browser (Chrome, but Firefox also doesn't work), the https part gets crossed out and the site appears as Not secure. I enter the credentials, and the page simply reloads prompting again for credentials. I know the credentials are correct, because if I input the wrong ones I actually get an incorrect user or password error.

I wonder if this doesn't work because the certificate is expired (though, in any case, it is associated to XXXX.3cx.gr, not the IP). But I don't know why it didn't renew or how I could get it to renew.

 

[SteveITS]

If you're getting to the login page you're past the invalid cert. I don't think that's the problem. You could try from a different browser/incognito window, or different PC/IP, maybe.

 

[toby_afr]

I have a similar problem, was it solved ?