Solved TLS Root Certificate re-issuance..

[AndreC]

Hi All,

I have setup encryption between 3CX and VoIP.MS and this works fine.

What was required to do is to upload a TLS Root Certificate via the 3CX console for the SIP Trunk.

That certificate is currently set to expire in September 2021...

Is there any way to automate the upload of a new certificate to the system via shell script?

 

[JohnS_3CX]

Hi @AndreC

The first step is to get the updated certificate from VoIP.MS in an automated way.

If this is not possible, then there isn't much point in trying to automate the 3CX side of things.

 

[AndreC]

Hi @AndreC

The first step is to get the updated certificate from VoIP.MS in an automated way.

How would I do that?

That certificate, currently, had to be uploaded manually when selecting TLS as the protocol in the Trunks/Options tab "TLS Root Certificate".

I suppose this could be done some others ways where 3CX would trust certificates issued by VoIP.MS for their servers..

Actually, I just downloaded a new root that will expire in 2035.. so I'm good for a while
https://letsencrypt.org/certificates/

 

[JohnS_3CX]

I don't know how you would achieve that, since the provider is the one issuing it, that's why I think it will always remain a manual process.

The one expiring in 2035 should solve the inconvenience indeed