Solved SSL Handshake error setting up some vvx 500 phones

[frozencrow]

I set up our system and began integrating phones in the client office. First 4 phones set up with out issue, now when trying to configure additional phones i'm getting the following in the logs on the phone:

```
000412.094|copy |4|00|SSL_connect error SSL connect error.error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
000413.106|copy |4|00|SSL_connect error SSL connect error.error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
000414.106|copy |4|00|SSL_connect error SSL connect error.error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
000415.099|copy |4|00|SSL_connect error SSL connect error.error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
000416.101|copy |4|00|SSL_connect error SSL connect error.error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
000417.102|copy |4|00|SSL_connect error SSL connect error.error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version
000417.922|cfg |4|00|Prov|Download of master configuration file failed
000417.922|cfg |4|00|Prov|Trying to boot from existing configuration
000417.922|cfg |4|00|Prov|Provisioning failed
000417.924|cfg |*|00|Prm|Not proceeding with reboot/restart, as device parameters needs to be updated, before making a decision
000417.924|cfg |*|00|Prov|Finished updating configuration
```

Any idea why 4 phones provision fine then now my other phones are returning those errors?

 

[frozencrow]

so, this seems to be a device isssue. I can't even do firmware updates on these 2 phones. Have 5 other phones of the same models working in office.

I notice these 2 phones have invalid date/time is it possible that's messing with the SSL connections to the servers?

 

[NicholasP_3CX]

For a secure connection it would be necessary to get the NTP issue sorted first. Without valid time there will be no secure connection.

 

[JohnS_3CX]

Hi @frozencrow

These are end of life phones so we no longer support or test them for compatibility, it's important to keep that in mind.

As a side note, I can confirm it provisions on the V20 U3 Beta (VVX 600 5.9.8.5760) as a remote phone via SBC

But if you are having firmware upgrade issues, I think you need to solve that first. You can always contact Polycom support or check their support articles for further info on how to upgrade them.

 

[frozencrow]

Yes, it seems that the 2 phones that aren't playing nice are on much older firmware ~5.5 and they aren't even able to download upgrades from the polycom server without an SSL handshake error. Currently trying to figure out how to manually upgrade via TFTP if anyone has an advice on that i'm still stuck there.

 

[frozencrow]

Welp, I think I went overkill on this. Built out my own http firmware server to upgrade to the latest version. That didn't fix it....:-/

Then, went into phone advanced settings > network > then set SNTP server to pool.ntp.org ... FIXED