W52P Provision Issue

[Eagle2469]

I have a W52P which was connected to a 3CX PBX cloud server.

I whitelisted the IP.

It has the latest firmware.

Disallow use of extension outside the LAN' is unticked.

I factory reset the device in order to connect to a newly setup 3CX cloud based server.

I disabled "Only Accept Trusted Certificates" on the device and rebooted. I entered in the correct provisioning link from 3CX and after failing I get the following errors in the log.


<131>Aug 29 02:22:38 LIBD[718]: DCMN<3+error > Certificate doesn't verify and error is 0, reason 1070
<131>Aug 29 02:22:38 LIBD[718]: HTTP<3+error > Connect Error
<131>Aug 29 02:22:38 ATP [718]: ATP <3+error > https to file failed, code = -3, msg = Connect Failed, retry = 1
<131>Aug 29 02:22:38 LIBD[718]: DCMN<3+error > Certificate doesn't verify and error is 0, reason 1070
<131>Aug 29 02:22:38 LIBD[718]: HTTP<3+error > Connect Error
<131>Aug 29 02:22:38 ATP [718]: ATP <3+error > https to file failed, code = -3, msg = Connect Failed, retry = 2
<131>Aug 29 02:22:38 LIBD[718]: DCMN<3+error > Certificate doesn't verify and error is 0, reason 1070
<131>Aug 29 02:22:38 LIBD[718]: HTTP<3+error > Connect Error
<131>Aug 29 02:22:38 ATP [718]: ATP <3+error > https to file failed, code = -3, msg = Connect Failed, retry = 3


What else can I try?

 

[phonemaster]

I have a W52P which was connected to a 3CX PBX cloud server.

I whitelisted the IP.

It has the latest firmware.

Disallow use of extension outside the LAN' is unticked.

I factory reset the device in order to connect to a newly setup 3CX cloud based server.

I disabled "Only Accept Trusted Certificates" on the device and rebooted. I entered in the correct provisioning link from 3CX and after failing I get the following errors in the log.


<131>Aug 29 02:22:38 LIBD[718]: DCMN<3+error > Certificate doesn't verify and error is 0, reason 1070
<131>Aug 29 02:22:38 LIBD[718]: HTTP<3+error > Connect Error
<131>Aug 29 02:22:38 ATP [718]: ATP <3+error > https to file failed, code = -3, msg = Connect Failed, retry = 1
<131>Aug 29 02:22:38 LIBD[718]: DCMN<3+error > Certificate doesn't verify and error is 0, reason 1070
<131>Aug 29 02:22:38 LIBD[718]: HTTP<3+error > Connect Error
<131>Aug 29 02:22:38 ATP [718]: ATP <3+error > https to file failed, code = -3, msg = Connect Failed, retry = 2
<131>Aug 29 02:22:38 LIBD[718]: DCMN<3+error > Certificate doesn't verify and error is 0, reason 1070
<131>Aug 29 02:22:38 LIBD[718]: HTTP<3+error > Connect Error
<131>Aug 29 02:22:38 ATP [718]: ATP <3+error > https to file failed, code = -3, msg = Connect Failed, retry = 3


What else can I try?

Hi Eagle2469,
What exactly the firmware number that you are using?
Please remember the you need to use the 25.81.0.30 version that contains all fixes.

Are you followed all instructions from this guide?
Please have a look again.

If your firmware is old and you don't want to update it, try to disable the "Enable PCI compliance SSL Transport and Ciphers" from the Settings -> Security page.

 

[complex1]

use the 25.81.0.30 version that contains all fixes

Which bugs are fixed?
What are the differences between 25.81.0.10 and 25.81.0.30
Do you have the release notes or bugfix reports?

 

[Eagle2469]

What exactly the firmware number that you are using?
Please remember the you need to use the 25.81.0.30 version that contains all fixes.

Where are you finding 25.81.0.30? The latest firmware on Yealink's website is listed as "Base for W52P&W56P-25.81.0.10"

I did follow the guide completely, multiple times.

If your firmware is old and you don't want to update it, try to disable the "Enable PCI compliance SSL Transport and Ciphers" from the Settings -> Security page.

Disabling this resolved the issue. I guess the phone is not compatible.

 

[phonemaster]

Which bugs are fixed?
What are the differences between 25.81.0.10 and 25.81.0.30
Do you have the release notes or bugfix reports?

Hi,
I don't have the full list of the fixed bugs and added features due that Yealink never published it, but I know for sure that the TLS v1.2 is added to 25.81.0.30 version.
This is why you need, or keep the "Enable PCI compliance SSL Transport and Ciphers" enabled and update your W52, or disable the "Enable PCI compliance SSL Transport and Ciphers" and keep using the 25.81.0.10 version. It's up to you...
My personal opinion is to keep the "Enable PCI compliance SSL Transport and Ciphers" enabled and update your W52 to 25.81.0.30.
You can download it from here: https://www.yealink.com/products_48.html


Also, form here you can download and update your handsets too.... It's again up to you, but remember - it's always better to use the 3CX suggested/supported firmware version. I'm always doing this and have very small amount of issues...

 

[complex1]

I don't have the full list of the fixed bugs and added features

Just as I thought :-(

due that Yealink never published it

Yealink always publish bugfixes and release notes

but I know for sure that the TLS v1.2 is added to 25.81.0.30 version

Who told you that… Yealink Support, 3CX Support or is it somewhere written down, and if so, where?