SSL Cert Expired

[commercial1]

We have an install with a pro lisc assigned to it but the SSL cert has not been renewed any one any idea how I renew this ? Its the SSL cert automatically created and installed

 

[Saqqara]

Is this a 3CX fqdn ssl certificate or own ssl certificate ?

 

[commercial1]

Is this a 3CX fqdn ssl certificate or own ssl certificate ?

It's a 3CX fqdn

 

[Saqqara]

The certificate should update over night.

Do you have active maintenance , on the license key in question.

 

[commercial1]

The certificate should update over night.

Do you have active maintenance , on the license key in question.

It is a full pro lisc and the cert expired a week ago. It's an annual lisc and shows it has maintenance until renewal

 

[cobaltit]

Are you on v15.5 Update 6?

 

[commercial1]

Version shows as 15.5.5 If I go to updates there is only showing a phone template update availble

 

[Saqqara]

On the front screen of the management console under information you will see your license.

Version should be 15.5.15502.6

This versions is required, as 3CX changed backend licensing servers.

 

[commercial1]

I go to updates and it does not show any available updates, is there another way to update it ?

 

[cobaltit]

https://www.3cx.com/blog/news/pbx-upgrade-update-6/

 

[commercial1]

I get the following
Unable to use key file "C:\Users\mat.deaville\Commercial Networks\Commercial Networks - Documents\3CX\newprivatekey.ppk" (SSH-1 private key)
login as: root
[email protected]'s password:
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Mon Oct 29 11:40:27 2018 from 0.ip-151-80-146.eu
root@pbxexpress-krah-59my-rfvg-y9ch:~# apt-get update
Ign http://debian.mirrors.ovh.net jessie InRelease
Get:1 http://debian.mirrors.ovh.net jessie-updates InRelease [145 kB]
Get:2 http://debian.mirrors.ovh.net jessie Release.gpg [2,420 B]
Get:3 http://debian.mirrors.ovh.net jessie Release [148 kB]
Get:4 https://downloads.3cx.com InRelease [1,245 B]
Get:5 http://debian.mirrors.ovh.net jessie-updates/main Sources [32 B]
Get:6 http://security.debian.org jessie/updates InRelease [44.9 kB]
100% [4 InRelease gpgv 1,245 B] [Waiting for headers]Splitting up /var/lib/apt/lists/partial/downloads.3cx.com_downloads_3cxpbxexpress_InRelease into data and sGet:7 http://debian.mirrors.ovh.net jessie-updates/main amd64 Packages/DiffIndex [12.3 kB]
Ign https://downloads.3cx.com InRelease
Get:8 http://debian.mirrors.ovh.net jessie-updates/main Translation-en/DiffIndex [4,180 B]
E: GPG error: https://downloads.3cx.com InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?)
root@pbxexpress-krah-59my-rfvg-y9ch:~# apt-get update
Ign http://debian.mirrors.ovh.net jessie InRelease
Get:1 http://debian.mirrors.ovh.net jessie-updates InRelease [145 kB]
Get:2 http://debian.mirrors.ovh.net jessie Release.gpg [2,420 B]
Get:3 http://debian.mirrors.ovh.net jessie Release [148 kB]
Get:4 https://downloads.3cx.com InRelease [1,245 B]
Get:5 http://debian.mirrors.ovh.net jessie-updates/main Sources [32 B]
Get:6 http://debian.mirrors.ovh.net jessie-updates/main amd64 Packages/DiffIndex [12.3 kB]
100% [4 InRelease gpgv 1,245 B] [6 Packages 12.3 kB/12.3 kB 100%] [Connecting tSplitting up /var/lib/apt/lists/partial/downloads.3cx.com_downloads_3cxpbxexpressIgn https://downloads.3cx.com InRelease
Get:7 http://debian.mirrors.ovh.net jessie-updates/main Translation-en/DiffIndex [4,180 B]
E: GPG error: https://downloads.3cx.com InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?)
root@pbxexpress-krah-59my-rfvg-y9ch:~# apt-get upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... The following package was automatically installed and is no longer required:
libuuid-perl
Use 'apt-get autoremove' to remove it.
Done
The following packages have been kept back:
linux-image-amd64
The following packages will be upgraded:
base-files debconf debconf-i18n debian-archive-keyring file krb5-locales
libc-ares2 libdb5.3 libgssapi-krb5-2 libgtk2.0-0 libgtk2.0-bin
libgtk2.0-common libio-socket-ssl-perl libk5crypto3 libkrb5-3
libkrb5support0 libldap-2.4-2 libmagic1 libncurses5 libncursesw5
libpam-modules libpam-modules-bin libpam0g libtinfo5 libxfixes3 libxi6
libxrandr2 linux-image-3.16.0-4-amd64 ncurses-base ncurses-bin ncurses-term
os-prober patch sudo w3m
35 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
Need to get 2,242 kB/49.4 MB of archives.
After this operation, 12.3 kB of additional disk space will be used.
Do you want to continue? [Y/n] n
Abort.
root@pbxexpress-krah-59my-rfvg-y9ch:~# apt-get update
Ign http://debian.mirrors.ovh.net jessie InRelease
Get:1 http://debian.mirrors.ovh.net jessie-updates InRelease [145 kB]
Get:2 http://debian.mirrors.ovh.net jessie Release.gpg [2,420 B]
Get:3 http://debian.mirrors.ovh.net jessie Release [148 kB]
Get:4 https://downloads.3cx.com InRelease [1,245 B]
Get:5 http://debian.mirrors.ovh.net jessie-updates/main Sources [32 B]
100% [Connecting to security-cdn.debian.org] [4 InRelease gpgv 1,245 B] [WaitinSplitting up /var/lib/apt/lists/partial/downloads.3cx.com_downloads_3cxpbxexpressIgn https://downloads.3cx.com InRelease
E: GPG error: https://downloads.3cx.com InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?)
root@pbxexpress-krah-59my-rfvg-y9ch:~# [Connecting to security-cdn.debian.org] [4 InRelease gpgv 1,245 B] [WaitinSplitting up /var/lib/apt/lists/partial/downloads.3cx.com_downloads_3cxpbxexpressIgn https://downloads.3cx.com InRelease
-bash: [Connecting: command not found
root@pbxexpress-krah-59my-rfvg-y9ch:~# E: GPG error: https://downloads.3cx.com InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?)

[Connecting to security-cdn.debian.org] [4 InRelease gpgv 1,245 B] [WaitinSplitting up /var/lib/apt/lists/partial/downloads.3cx.com_downloads_3cxpbxexpressIgn https://downloads.3cx.com InRelease
E: GPG error: https://downloads.3cx.com InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?)

-bash: syntax error near unexpected token `('
root@pbxexpress-krah-59my-rfvg-y9ch:~# apt-get update Ign http://debian.mirrors.ovh.net jessie InRelease
Get:1 http://debian.mirrors.ovh.net jessie-updates InRelease [145 kB]
Get:2 http://debian.mirrors.ovh.net jessie Release.gpg [2,420 B]
Get:3 http://debian.mirrors.ovh.net jessie Release [148 kB]
Get:4 https://downloads.3cx.com InRelease [1,245 B]
Get:5 http://debian.mirrors.ovh.net jessie-updates/main Sources [32 B]
Get:6 http://security.debian.org jessie/updates InRelease [44.9 kB]
100% [4 InRelease gpgv 1,245 B] [Waiting for headers]Splitting up /var/lib/apt/lists/partial/downloads.3cx.com_downloads_3cxpbxexpress_InRelease into data and sIgn https://downloads.3cx.com InRelease
Get:7 http://debian.mirrors.ovh.net jessie-updates/main amd64 Packages/DiffIndex [12.3 kB]
E: GPG error: https://downloads.3cx.com InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?)
root@pbxexpress-krah-59my-rfvg-y9ch:~#

 

[cobaltit]

So you are supposed to be on stretch at this point. It might be easier to backup and then nuke the instance and make a fresh one or at least reinstall this one to keep the IP. Not sure how OVH works. This should setup the correct firewall settings for you as well.

 

[commercial1]

thanks firewall settings seem to be fine, although ive just removed 3cx from repository and readded and now I seem to have an update so fingers crossed it installs this time. THanks

 

[commercial1]

Spoke too soon I got to sp3 and now when I go via the web front end it shows as available select it to download it displays the message about restarting services and then logs me out, when I go back in the same again so close yet so far

 

[JohnS_3CX]

Generally speaking, you have a couple of options once you've already downloaded a backup file first:

• Try and upgrade the existing OS to Debian 9 and then purge your 3CX installation and try to install manually https://www.3cx.com/docs/manual/installing-debian-linux-pbx/ and apt-get 3cxpbx=15.5.15502.6
• Or deploying it manually again once you create a fresh Debian 9 Stretch machine, and selecting version 15.5.15502.6 apt-get 3cxpbx=15.5.15502.6 as above

Once you reach the point where you installed 15.5.15502.6 and restored you backup the machine can speak with the activation servers and can get the certificate renewed automatically. You will also need to open the required ports accordingly https://www.3cx.com/docs/ports/