yealink - problems with autoprovisioning and valid certificate

[ccampos82]

I have a problem, I have my own SSL certificate in my 3cx, at the moment of the autoprovisioning it did not load and when removing in the yealink options only valid certificates there the autoprovisioning works but it does not load the directory

 

[AWS2P]

Is your cert a supported one from Yealink phones?

 

[ccampos82]

Hi, my certificate is a wildcard, the yealink phone i am using is a T29G, how can i see if it is compatible?

 

[jstmw18]

@ccampos82

Is this a public certificate generated through a CA or and internal CA? To see compatability etc. for yealink you could view the following yealink support document. Hopefully this provides some guidance. You can go to yealinks site and view the specific doc for your phone type if needed.

http://support.yealink.com/forward2...pv9RlkWSQ4znSjD9YIjRMp9Uianp0KMBVPYwNl2thFJA=

 

[ccampos82]

Hi,
It is a Public certificate, and I am trying to download it by http and by https but it does not load on the phone, when trying to see it on the web, it is possible to see it by http and https in the browser

 

[cobaltit]

So I'm not actually sure what you are trying to do but that's not where you put the provisioning URL. And if you don't know which certificates the Yealink phones trust then perhaps you should just stick with the 3CX FQDN so it's all handled automatically for you?

 

[ccampos82]

I'm sorry, I was seeing two topics, so I saw on yealink if you accept the Geotrust certificate, which is who we bought the Public CA from

 

[SweetAction]

Is the full chain of the cert present? Esp important if you are using a SBC.

Root -> Intermediate -> Server Cert.

The phone only has the Root, so 3CX needs a "Chained" SSL cert (has both the Server and the Intermediate cert)

https://www.thesslstore.com/knowledgebase/ssl-support/combining-multiple-intermediate-certificates/

test here: https://www.ssllabs.com/ssltest/