Provisioning SSL Certificate supported by Yealink phones

[ausip]

Hi All,

I am after some recommendations for an SSL certificate to use on our 3CX system that will support provisioning of Yealink phones via Yealink RPS / 3CX.

Currently we have tried RapidSSL and some Sectigo / Comodo certificates, but we need to turn of certificate validation on the phones for the provisioning to work.

I don't want to spend Verisign $$$, Sectigo and RapidSSL are at a great price point.

Thanks in advance

 

[Evolute IT]

3CX has SSL built-in and freely. Just use a 3CX FQDN?

 

[ausip]

We require the use of a custom FQDN, therefore need to use our own SSL certificate.

What wildcard certificate do 3CX use for their 3CX domain?

 

[Evolute IT]

It's not a wildcard, it's a unique Let's Encrypt SSL per instance.

 

[cobaltit]

We require the use of a custom FQDN, therefore need to use our own SSL certificate.

What wildcard certificate do 3CX use for their 3CX domain?

So you have a 'requirement' to use a custom FQDN, but not the budget for a Verisign one? Seems like an odd combination. But as this has nothing to do with 3CX you'll want to go over to the Yealink website, look up for phone model, and they list what roots are baked into the firmware.

 

[ausip]

@cobaltit, we have done that and RapidSSL and Comodo should work. That's why I thought I'd ask the community what SSL certificates they have used that actually work, rather than buying a heap of certificates from different vendors in the hope that they will work.