Unable to get Snom D717 and D735 phones to upgrade

[coreybrett81]

I am having trouble getting 100 or so phones to upgrade to the 10.1.73.16 firmware from 10.1.64.17.

When the phone attempts to install the update, it gives a "wrong or corrupt update error 98" message on the screen, after awhile they reboot and re-register.

If I look in the logs, I find the following...

Sep 26 18:07:35.053 [ALERT ] WEBCLIENT: request https://xxxxxxxxxxxx:443/provisioning/nnbwfrrl6x9/firmware/snom/snomD735_external.xml stopped due to no response from server for con_id:4; resending with timeout 8522 ms

Sep 26 18:07:35.291 [ERROR ] TLS: OSSL error (GetDecryptedInput ssl error): code 336151570, error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate

Sep 26 18:07:35.292 [ERROR ] PHN: TPL: Socket Error: 24/38/connected, Tls error, closing

Out of 100 or so, only three actually updated. 2 of them are STUN phones, and one is behind an SBC.
All the phones that won't update are behind SBCs.

 

[coreybrett81]

I'm running 16.0.9 on the server.

 

[coreybrett81]

When trying to push an update from the server, the URL that the phones are trying to download from is...
http://downloads.3cx.com:80/downloa...areupdates/snom/snomD717-10.1.73.16-SIP-r.bin

If I visit that URL from a computer on the same network as the phones, I am able to download the file.

If I paste that link into the phones "Manual Software Update" field and press the Load button, I get the same result.

When I downloaded that file and uploaded it to another webserver, then used that URL on the phone, the phone does install the new firmware.

Is something weird going on with downloads.3cx.com ?

 

[coreybrett81]

So after a little more diag...

If I manually enter...
http://downloads.3cx.com/downloads/v160/templates/firmwareupdates/snom/snomD717-10.1.73.16-SIP-r.bin
the phone will reject the update.

If I manually enter...
https://downloads.3cx.com/downloads/v160/templates/firmwareupdates/snom/snomD717-10.1.73.16-SIP-r.bin
the phone will accept the update.

When I visit the http version with a browser using the dev tools, I notice that it results in a 301 redirect from Cloudflair.

I'm thinking the Snom phones can't deal with the 301 redirect, and that's why the upgrade fails.

Is there a way to get the server to push out the https version of the link, or could 3CX remove the 301?

 

[jcostlow]

You could make a temporary provisioning profile on SRAPS to update the firmware and reboot the phone. After all are updated remove from SRAPS and then add to 3CX.

 

[JohnS_3CX]

So after a little more diag...

If I manually enter...
http://downloads.3cx.com/downloads/v160/templates/firmwareupdates/snom/snomD717-10.1.73.16-SIP-r.bin
the phone will reject the update.

If I manually enter...
https://downloads.3cx.com/downloads/v160/templates/firmwareupdates/snom/snomD717-10.1.73.16-SIP-r.bin
the phone will accept the update.

When I visit the http version with a browser using the dev tools, I notice that it results in a 301 redirect from Cloudflair.

I'm thinking the Snom phones can't deal with the 301 redirect, and that's why the upgrade fails.

Is there a way to get the server to push out the https version of the link, or could 3CX remove the 301?

Hi Corey,

I manually downgraded a D717 to the version you mentioned.

I then provisioned it in a SBC-based V16.0.8.9 PBX and proceeded to upgrade the firmware as you would normally via the management console.

In my case, the D717 downloaded the file immediately and the upgrade was successful.
Below you can see the requesting phone stating its current firmware, and the plain HTTP URL it used to download the file


Some points to consider:

- We had some downtime on Friday, if that's when you had tried, just try again today
- Do not upgrade them all at once, they will likely overwhelm your network (smaller batches might work better)
- There could be a security policy on your firewall that may be preventing the phones
- The one I just tested was OK, indicating that the phone itself is more than capable of completing the task on that specific FW version.

 

[coreybrett81]

Interesting...

Last night, this url...
http://downloads.3cx.com/downloads/v160/templates/firmwareupdates/snom/snomD717-10.1.73.16-SIP-r.bin

was producing a 301 redirect from Cloudflair to the https version.

This morning, it is producing a 200 and the phones are accepting the url.

My original attempt was on Friday night around 8pm EST, but Sunday night I was still having no luck.

 

[JohnS_3CX]

That's good to hear, give it a go today and let us know whether you can get your upgrades to complete.