Jump to content

Bela

Members
  • Posts

    16
  • Joined

  • Last visited

Posts posted by Bela

  1. Now I have noticed a weird problem.

    When I change anything in the configuration, (for example extension call forward) it gets "saved", but the PBX still seem to work according to the previous setting.

    Eg. Does not forward the call to a different extension.

    Also there was a cell diversion on the extension, I deleted it, but the call still gets diverted to the cell.

     

    I this related to this particular software version maybe?

     

    Bela

  2. When I start the pbxctrl.exe manually I get the following error message:

    The procedure entry point K32GetProcessMemoryInfo could not be located in the dynamic link library KERNEL32.dll

     

    Is the upgrade somehow installing the 32 bit version instead of the 64 bit??

     

    Bela

  3. Maybe you can give us a PCAP trace and the certificates in Base64 format (just send a private message). It seems there is something wrong with the certificate chain representation in the TLS stream.

     

    You mean, that I should capture the IP packets?

    I guess if you have the certs, and install them in a Snom One, you will have the same problem.

    And since this happens with two certification authorities, I assume its something in the Snom ONE.

    Nevertheless, I can send you the certs in PM, but then I would have to send you the private key as well? :)

     

    Bela

  4. Ok, so in the scenario I have the phones are remote to the Snom One PBX, and I have turned on TLS.

    When RTP Encryption (SRTP) is also ON on the 820 phones, the caller hears white noise after the call has been picked up.

    (When someone calls in through the trunk and a Snom 820 extension picks up the call)

     

    Does this mean that my trunk provider does not support SRTP?

     

    Bela

  5. I believe you are almost there... Because it is a chain, I would use the Web Server certificate, empty line, then the Intermediary CA from Geotrust, then the Root CA from Geotrust. Empty lines dont matter, just make sure that the ---BEGIN CRETIFICATE----- and ----END CERTIFICATE---- are there.

     

    I think I already tried in this order, but nevertheless I did it again...

    Same error...:(

     

    In chrome:

    SSL connection error

    Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have.

    Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.

     

    In Firefox:

    Secure Connection Failed

     

     

    An error occurred during a connection to sip.xxxxxxx.com:xxxx.

     

    SSL received a record with an incorrect Message Authentication Code.

     

    (Error code: ssl_error_bad_mac_read)

     

    Internet Explorer doesnt even connect...

     

    This all happens if I add it as a Server Certificate Chain+key.

    If I add it as a Domain Certificate chain, Snom One doesnt even use it, although the domain in the cert matches the domain of snom one, but instead presents the "Snom One Intermediate" certificate for https traffic...

  6. Thats incorrect. snom ONE can deal with 2048 bits.

     

    You need to install that as server cert, and you must include the private key as well (everything base64 encoded). if you import a certificate chain, make sure that the Root CA is at the top and the intermediate right below it. You should see that also in the wireshark trace then.

     

    Well, yes, its impossible to buy a signed SSL certificate from a trusted CA bellow 2048 bits since long time ago...

     

    On the other note, I have tried everyting, but I get the same errors.

     

    When adding to Snome One, in the certificate field, I entered the Web Server certificate, empty line, then the Root CA from Geotrust, empty line, then the Intermediary CA from Geotrust.

    In the private key section, i enter the private key.

    I add it as a server certificate chain+private key.

    I see the domain name in the certificate list.

     

    But when I try to acess the admin web via https I get the errors...:(

     

    Bela

  7. I have looked through the forums, but this does not seem to have been answered.

     

    I have tried to install a private key, plus an SSL certificate form two CAs (Startcom and Geotrust), but no matter what after I install it as a server certificate, I get an SSL error, and cant connect to the PBX web server securely until i delete the cert.

    The error is different depending on the browser, but none of them work.

     

    The cert is 2048 bit, as its not possible to get any lower ones.

     

    I installed the cert and the intermediary cert, and the private key.

    The Trusted root CA is there for both Geotrust and Startcom.

     

    Any ideas?

    Thanks in advance.

     

    Bela

  8. A follow-up post, with a big THANK YOU to "pbx support" here...

     

    Using Vonage as a SIP provider, the settings that worked are (in Trunks->Number/Call Identification):

     

    Prefix: empty

    Trunk ANI: xxxxxxxxxxx (where xxxxxx is our 10-digit Vonage telephone number)

    Remote Party/Privacy Indication: Custom Headers

    Request-URI: Let the system decide

    From: Based on incoming call

    To: Let the system decide

    P-Asserted-Identity: Other "xxxxxxxxxxx" <sip:xxxxxxxxxxx@{trunk-registrar}> (where xxxxxxx is our 10 digit Vonage number)

    P-Preferred-Identity: Don't use header

    Remote-Part-ID: Don't use header

    P-Charging-Vector: Don't use header

    Privacy Indication: Don't use header

     

    :) All works great now.

     

    Hey, thanks for the tip!

    I started to go mad after the update i did yesterday, but with these tweaks I also managed to get it to work with a local Hungarian voip trunk provider. :)

     

    Regards,

     

    Bela

  9. Hi, Faxback used to do a free plugin for Windows fax, however its a paid for product now, anyone know of a plugin for Windows fax i can use as i need to play with a few setup details.

     

    You can still download the free plugin, I installed it the other day!

     

    Bela

  10. Hi,

     

    I installed Snom One, and was playing with it.

    Its quite nice, I like it a lot, so we purchased some Snom phones as well.

    I was thinking about making Hungarian voice prompts, is there a list (text file) of the prompts needed?

    Also, would there be some sort of a reward for doing it? Maybe a free license? :)

     

    Regards,

     

    Bela

    -------------

    www.infotechna.com

×
×
  • Create New...