Secure SIP/TLS keys deleted… help?

[SteveAndo]

Hi,

I may have inadvertently done something stupid.

I read somewhere that the IOS app uses tunnel and not SSL/TLS… I am not able to dial out. So I thought I'd turn off the Secure SIP/TLS checkbox, thinking I'd just revert/flip it back on if nothing changed.

Of course, when doing that the large string of characters in the keys disappears.

It's a phone system with a 3CX supplied FQDN.

Any tips? Or have I royally shafted myself?

Cheers!

 

[cobaltit]

Restore from backup

 

[SteveAndo]

Thanks for your reply, and I was afraid that might be the answer…

No backup has been done as yet. Have just been getting it going recently.

Is that the only way to get it back?

 

[JohnS_3CX]

Hi Steve,

Is it a windows or linux install?

 

[SteveAndo]

Hi Steve,

Is it a windows or linux install?

Linux… its on AWS

 

[JohnS_3CX]

Ok you will have to find a way to access your filesystem (ie. WinSCP). Amazon help can guide you to set up an SFTP connection.

Once you are in take a look here to see if you can still find your certificates:

/var/lib/3cxpbx/Instance1/Bin/Cert/domain_key_myfqdn.3cx.com.pem
/var/lib/3cxpbx/Instance1/Bin/Cert/domain_cert_myfqdn.3cx.com.pem
/var/lib/3cxpbx/Bin/nginx/conf/Instance1/dhparam.pem
/var/lib/3cxpbx/Bin/nginx/conf/Instance1/myfqdn.3cx.com-key.pem
/var/lib/3cxpbx/Bin/nginx/conf/Instance1/myfqdn.3cx.com-csr.pem
/var/lib/3cxpbx/Bin/nginx/conf/Instance1/myfqdn.3cx.com-crt.pem
/var/lib/3cxpbx/Bin/nginx/conf/lets-encrypt-x3-cross-signed.pem

 

[SteveAndo]

Thanks John.

I used the 3CX AMI image to install.

https://aws.amazon.com/marketplace/pp/B07WGGRFJC?qid=1586348110372&sr=0-1&ref_=srh_res_product_title

I'm not sure I have the credentials to login. I obviously have the username/password to login to the 3CX system admin portal… but they don't work.

 

[JohnS_3CX]

I think that when you create the AWS machine you are given a key for safekeeping.
https://www.3cx.com/docs/cloud-pbx-amazon-aws/#h.sj9pyr62gtmd


Otherwise, you might have too look at amazon's documentation on how to gain access to the machine via SSH / SFTP