Polycom VVX3xx and VVX250 don't register over TLS after provision

[chrispopp]

Testing with a VVX311 and a VVX250. Both phones do not register after they provision if it's set to TLS. But changing it to UDP/TCP the phones register and work correctly. Thinking it's an issue with the certificate, but I don't know where to start looking.

 

0828145124|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145124|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145124|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145124|copy |*|00|Server 'pbx.pbxsevilla.com' said 'prov/polycom/64167f8373a5-app.log' is not present
0828145124|copy |4|00|Could not set the custom header Content-Range for HTTP/s request. Head request failed to get content-length of server file.
0828145124|copy |*|00|Server 'pbx.pbxsevilla.com' said 'prov/polycom/64167f8373a5-app.log' is not present
0828145124|log  |4|00|UtilLogServerC::uploadFifoLog: upload error. protocol 0 result = 12
0828145124|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-app.log' is not present
0828145124|copy |4|00|Could not set the custom header Content-Range for HTTP/s request. Head request failed to get content-length of server file.
0828145124|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-app.log' is not present
0828145124|log  |4|00|UtilLogServerC::uploadFifoLog: upload error. protocol 0 result = -1
0828145207|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145207|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145207|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145207|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145248|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145248|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145248|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145248|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
000017.901|rdisk|*|00|Initial log entry. Current logging level 4
000017.906|rdisk|*|00|RAM disk created and mounted at "/rfs0"
000017.910|rdisk|*|00|RAM disk created, size: 16,777,216 bytes
000018.161|so   |*|00|Platform: Model=VVX 311, Assembly=3111-48350-001 Rev=A Region=0
000018.162|so   |*|00|Platform: Interface    eth0 MAC=64167f8373a5
000018.162|log  |*|00|---------- Initial log entry ----------
000018.164|so   |*|00|Platform: BootBlock=3.0.5.0026 (48350-001) 13-Oct-15 17:05
000018.165|so   |*|00|Platform: BootL1=1.0.0.0013 (48350-001) 13-Oct-15 17:01
000018.170|so   |*|00|Platform: Updater=5.7.2.24637 03-Jul-19 21:12
000018.170|so   |*|00|Application, main: Label=SIP, Version=Elbe2 5.5.2.12475 03-Jul-19 20:37
000018.172|so   |*|00|Application, main: P/N=3150-11530-552
000018.175|pec  |*|00|Initial log entry. Current logging level 4
000018.179|rdisk|*|00|RAM disk created, size: 16,777,216 bytes
000018.180|ocsp |*|00|O.C.S.P. Enabled = 0
000018.231|tls  |*|00|Initial log entry. Current logging level 4
000018.274|pmt  |*|00|Initial log entry. Current logging level 4
000018.288|wdog |*|00|Initial log entry. Current logging level 4
000018.288|ethf |*|00|Initial log entry. Current logging level 4
000018.290|hw   |*|00|Initial log entry. Current logging level 4
000018.292|ares |*|00|Initial log entry. Current logging level 4
000018.294|dns  |*|00|Initial log entry. Current logging level 4
000018.294|cfg  |*|00|Initial log entry. Current logging level 4
000018.294|cfg  |*|00|Prm|cfgParamBaseProfileUpdate: Using Base Profile Generic
000018.303|dot1x|*|00|Initial log entry. Current logging level 4
000018.352|so   |5|00|drvAlsaBCM11107Init: verAudio not found, assuming Vino

000018.470|lic  |*|00|Initial log entry. Current logging level 4
000018.484|lic  |*|00|License expiry check in 26012 seconds
000018.898|curl |*|00|Initial log entry. Current logging level 4
000018.898|utilm|*|00|Initial log entry. Current logging level 4
000018.898|copy |*|00|Initial log entry. Current logging level 4
000018.901|rtos |*|00|Initial log entry. Current logging level 4
000018.905|sec  |*|00|Initial log entry. Current logging level 4
000018.911|so   |*|00|Configuration files: prov/polycom/64167f8373a5-all.cfg
000018.911|so   |*|00|Configuration file "prov/polycom/64167f8373a5-all.cfg" SHA1 digest: 732324695F1B23432SDASDA34C51311AA91060C0
000018.911|cfg  |4|00|Prm|Configuration file(s) statistics: 1 parameters were invalid and could not be interpreted.
000018.911|cfg  |4|00|Prm|Configuration file(s) statistics: 1 parameter values were used but were out of range. 4 were invalid and ignored.
000018.932|log  |*|00|Log render level set to 1
000018.944|pcap |*|00|On-Phone Packet Capture disabled
000018.949|srtp |*|00|Initial log entry. Current logging level 4
000018.960|res  |*|00|Initial log entry. Current logging level 4
000018.965|httpa|*|00|Initial log entry. Current logging level 4
000018.967|lldp |*|00|Initial log entry. Current logging level 4
000018.969|cdp  |*|00|Initial log entry. Current logging level 4
000018.973|pcd  |*|00|Initial log entry. Current logging level 4
000018.983|ssps |*|00|Initial log entry. Current logging level 4
000018.993|ssps |5|00|Allocated 36992 bytes for SspsHdiMemBase=0x155d398
000018.996|ssps |*|00|sspsDspLoad: found SubVino2 33.
000019.305|ssps |*|00|sspsMain: sspsDspLoad successful using default image.
000019.307|so   |*|00|System Info Reports:
000019.307|so   |*|00|  Cpu is ARMv6-compatible processor rev 7 (v6l), ID: 0x111880b0, running at 500MHz.
000019.307|so   |*|00|  Board is identified as PolycomVVX-VVX_311.
000019.307|so   |*|00|  DRAM_SIZE: 224 MB
000019.307|so   |*|00|  NAND flash detected is 20
000019.307|key  |*|00|Initial log entry. Current logging level 4
000019.333|httpd|*|00|Initial log entry. Current logging level 4
000019.339|poll |*|00|Initial log entry. Current logging level 4
000019.340|push |*|00|Initial log entry. Current logging level 4
000019.342|poll |*|00|Initial log entry. Current logging level 4
000019.342|poll |*|00|Initial log entry. Current logging level 4
000019.344|rest |*|00|Initial log entry. Current logging level 4
000019.349|ht   |*|00|Initial log entry. Current logging level 4
000019.349|ht   |*|00|HTTP TA Initialized
000019.352|dbuf |*|00|Initial log entry. Current logging level 4
000019.356|ssps |*|00|sspsMain: Set HDI mem to be 0, was 0
000019.368|ice  |*|00|Initial log entry. Current logging level 4
000019.374|pps  |*|00|Initial log entry. Current logging level 4
000019.375|sip  |*|00|Initial log entry. Current logging level 4
000019.376|sipt |*|00|Initial log entry. Current logging level 4
000019.376|sipp |*|00|Initial log entry. Current logging level 4
000019.382|ssps |*|00|Application, comp. 1: Label=PolyDSP Vino BCM11189 Mem1 FS5, Version=8.4.7.1007E 03-Mar-2017 12:38
000019.382|ssps |*|00|Application, comp. 1: P/N=3150-11580-877.
000019.387|ptt  |*|00|Initial log entry. Current logging level 4
000019.391|xmpp |*|00|Initial log entry. Current logging level 4
000019.399|btoe |*|00|Initial log entry. Current logging level 4
000019.400|pdect|*|00|Initial log entry. Current logging level 4
000019.458|so   |5|00|soCoreAudio compiledOffsetsApply error: unrecognized verAudio 33 for USB headset
000020.402|pwrsv|*|00|Initial log entry. Current logging level 4
000020.471|so   |*|00|Using TCP IP Media Port, configured initial RTP port 2222
000020.472|so   |*|00|Using TCP IP Media Port, configured initial RTP port 2222
000020.489|usb  |*|00|Initial log entry. Current logging level 4
000020.498|pwr  |*|00|Initial log entry. Current logging level 4
000020.498|pwr  |5|00|Initialising Power Manager - Polyapp 
000020.499|sshc |*|00|Initial log entry. Current logging level 4
000020.500|gbLoc|*|00|Initial log entry. Current logging level 4
000020.507|app1 |*|00|Initial log entry. Current logging level 4
000020.538|pwr  |5|00|Powering up USB ports from Power Manager usb0power 1 usb1power 1
000020.582|app1 |*|00|AppPhoneC::AppPhoneC() Number Of Line Keys = 48
000020.582|app1 |*|00|AppPhoneC::AppPhoneC() - new AppRegLineC, szUser = 202
000020.680|ldap |*|00|Initial log entry. Current logging level 4
000020.684|dns  |4|00|doDnsLookupForList: DNS not yet initialized, skipping lookup.
000020.684|cfg  |5|00|Prm|Parameter dir.corp.attribute.x.addstar requested type 4 but is of type 7
000020.684|cfg  |5|00|Prm|Type 4 7 for array parameter 53 index 1 is not valid
000020.824|app1 |4|00|AppBrowserUiC::AppBrowserUiC Home url - [], idle url - []
000020.877|efk  |*|00|Initial log entry. Current logging level 4
000020.958|cmp  |*|00|Initial log entry. Current logging level 4
000020.961|slog |*|00|Initial log entry. Current logging level 3
000020.962|wmgr |*|00|Initial log entry. Current logging level 4
000021.384|so   |4|00|SoKeyC::procMsg unexpected message 4099
000021.958|wdog |*|00|Hw Watchdog timer interface successfully opened from polyapp
000022.849|pgui |*|00|Initial log entry. Current logging level 4
000027.424|app1 |4|00|AppUiC::onConnected - Resetting the previous backlight state.
000027.441|dhcpc|*|00|Initial log entry. Current logging level 4
000031.698|cfg  |5|00|RT|cfgRtRunDvdOnDhcpLease:DVD is not in progress
000031.701|cfg  |*|00|RT|   Phone IP address is 192.168.1.174.
000031.701|cfg  |*|00|RT|   Subnet mask is 255.255.255.0.
000031.701|cfg  |*|00|RT|   Gateway address is 192.168.1.1.
000031.707|cfg  |*|00|RT|   DNS server is 8.8.8.8.
000031.707|cfg  |*|00|RT|   DNS alternate server is 8.8.4.4.
000031.707|cfg  |*|00|RT|   DNS domain is popps.
000031.707|cfg  |*|00|RT|   Time server is pool.ntp.org.
000031.707|cfg  |*|00|RT|   GMT offset is -18000 seconds.
000031.710|dns  |*|00|DNS resolver servers are '8.8.8.8' '8.8.4.4'
000031.710|dns  |*|00|DNS resolver search domain is 'popps'
000031.711|cfg  |*|00|RT|Primary IP: 192.168.1.174 subnet mask 255.255.255.0
000031.715|dect |*|00|Initial log entry. Current logging level 4
000031.715|dect |*|00|createCmbsDectInstance :: cmbs Dect Instance is created 
000031.717|dect |4|00|PC port is not up, so not starting pc port pairing
000031.717|dect |4|00|PC port is not up, so not starting pc port pairing
000031.849|so   |*|00|Network initialized. Starting network tasks.
000031.851|loc  |*|00|Initial log entry. Current logging level 4
000031.888|AuthS|*|00|Initial log entry. Current logging level 2
000031.891|Devic|*|00|Initial log entry. Current logging level 4
000031.892|cfg  |4|00|Prm|cfgParamCbSet: duplicate function pointer
000031.897|proxy|*|00|Initial log entry. Current logging level 2
000031.897|cfg  |4|00|Prm|cfgParamCbSet: duplicate function pointer
000031.901|proxy|3|00|Proxy Service intialized
000031.902|WADSe|*|00|Initial log entry. Current logging level 2
000031.902|cfg  |4|00|Prm|cfgParamCbSet: duplicate function pointer
000031.906|log  |*|00|Install file upload callback for 'so'

000031.910|btoe |5|00|MsgPpsNcasProcessStartStopCmnd: BTOE is disabled. Cannot start Pairing
000031.954|pps  |*|00| vqmon Process Service Route is Disabled
0828145442|so   |4|00|File name is /rfs0/Alert1.wav
0828145442|so   |4|00|File name is /rfs0/Alert2.wav
0828145442|so   |4|00|File name is /rfs0/Alert3.wav
0828145442|so   |4|00|File name is /rfs0/Alert4.wav
0828145442|so   |4|00|File name is /rfs0/Alert5.wav
0828145443|so   |4|00|File name is /rfs0/Alert6.wav
0828145443|so   |4|00|File name is /rfs0/Alert1.wav
0828145443|so   |4|00|File name is /rfs0/Alert2.wav
0828145443|so   |4|00|File name is /rfs0/Alert3.wav
0828145443|so   |4|00|File name is /rfs0/Alert4.wav
0828145443|so   |4|00|File name is /rfs0/Alert5.wav
0828145443|so   |4|00|File name is /rfs0/Alert6.wav
0828145443|copy |*|00|Server 'pbx.pbxsevilla.com' said 'VVXLocalization/English_United_States/VVX-dictionary.xml' is not present
0828145443|res  |4|00|[ResFinderC]: Download - Failed to download file VVXLocalization/English_United_States/VVX-dictionary.xml, errno 0x2.
0828145451|pgui |5|00|Received personal directory [0]
0828145452|pgui |*|00|Qt Mouse driver created.
0828145453|em   |*|00|Initial log entry. Current logging level 4
0828145453|dbs  |*|00|Initial log entry. Current logging level 4
0828145453|osd  |*|00|Initial log entry. Current logging level 4
0828145454|clist|*|00|Initial log entry. Current logging level 4
0828145454|clist|4|00|dbCfg::getServerDir:Unknown dbCfg type
0828145454|clist|4|00|dbCfg::getServerDir:Unknown dbCfg type
0828145454|clist|4|00|dbCfg::getServerDir:Unknown dbCfg type
0828145454|clist|4|00|dbCfg::getServerDir:Unknown dbCfg type
0828145455|clist|4|00|dbSet::startLoadLocalSet:No local copy, requesting backup from server
0828145455|app1 |*|00|[AppHybridC]: App is completely initialized.
0828145455|so   |4|00|[SoNcasC]: appncascontext termination:1
0828145455|so   |4|00|[SoNcasC]: Case Handling termination:1
0828145455|cfg  |5|00|Prm|2DArray parameter reg.x.server.x.specialInterop index 265 1 is out of range
0828145455|so   |4|00|[SoNcasC]: appncascontext termination:1
0828145455|ldap |4|00|cDynamicData::activate:cDynamicData::activate() m_pCfg->lookupHost() = 1

0828145455|cfg  |5|00|Prm|Array parameter reg.x.ringType index 265 is out of range
0828145455|so   |4|00|[SoNcasC]: Case Handling termination:1
0828145455|cfg  |5|00|Prm|2DArray parameter reg.x.server.x.specialInterop index 265 1 is out of range
0828145455|cfg  |5|00|Prm|2DArray parameter reg.x.server.x.specialInterop index 265 1 is out of range
0828145455|cfg  |5|00|Prm|Parameter reg.x.outboundProxy.port requested type 0 but is of type 2
0828145455|sip  |*|00|Sip Register Usr:202 Dsp:FORW 4163092027 Auth:'64167f8373a5' Inx:0
0828145455|utilm|4|00|uBLFUnCompressed: File /ffs0/Config/Local/WebTicket/0/sip.usr doesn't exist or is empty
0828145455|sip  |*|00|Fast Boot Measurement Point: Ready for Call, uptime: 45.933 sec.
0828145455|app1 |4|00|fsmLclEvent - context=0, index=2, lineKeyNum=1, numLineKeys=1
0828145455|app1 |4|00|setFlexLineKeyIndex -Index: 0, Position: 0
0828145456|clist|4|00|dbCfg::getServerDir:Unknown dbCfg type
0828145456|clist|4|00|dbCfg::getServerDir:Unknown dbCfg type
0828145456|moh  |*|00|Initial log entry. Current logging level 4
0828145456|moh  |4|00|SoNcasMohC::soNcasmohCfgInit: File provisioning for Music On Hold is defined only for Lync Profile and if Music On Hold feature is enabled
0828145456|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145456|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145456|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145456|sip  |4|00|Registration failed User: 202, Error Code:480 Temporarily not available
0828145456|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145456|cfg  |*|00|Prov|Starting to provision
0828145456|cfg  |5|00|Prov|cfgProvStatusSet: Unknown status 53
0828145456|cfg  |*|00|Prov|Starting to update 3111-48350-001.sip.ld
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '3111-48350-001.sip.ld' is not present
0828145456|cfg  |*|00|Prov|Starting to update sip.ld
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said 'sip.ld' is not present
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-phone.cfg' is not present
0828145456|cfg  |4|00|Prov|File transfer failed due to curl error code:22 and respCode:404
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-web.cfg' is not present
0828145456|cfg  |4|00|Prov|File transfer failed due to curl error code:22 and respCode:404
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '000000000000-license.cfg' is not present
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-license.cfg' is not present
0828145456|cfg  |*|00|Prm|prov/polycom/64167f8373a5-all.cfg: Value 0 for configuration parameter reg.1.lineKeys is too small, using 1, the minimum allowed
0828145456|cfg  |*|00|Prm|prov/polycom/64167f8373a5-all.cfg: Value "" for configuration parameter tcpIpApp.sntp.daylightSavings.start.date is invalid, ignoring
0828145456|cfg  |*|00|Prm|prov/polycom/64167f8373a5-all.cfg: Value "" for configuration parameter tcpIpApp.sntp.daylightSavings.stop.date is invalid, ignoring
0828145456|cfg  |4|00|Prm|prov/polycom/64167f8373a5-all.cfg: Unknown parameter "dialplan.digitmap.set" found, ignoring.
0828145456|cfg  |*|00|Prm|prov/polycom/64167f8373a5-all.cfg: Value "" for configuration parameter ptt.port is invalid, ignoring
0828145456|cfg  |*|00|Prm|prov/polycom/64167f8373a5-all.cfg: Value "" for configuration parameter call.offeringTimeOut is invalid, ignoring
0828145456|cfg  |*|00|Prm|Not proceeding with reboot/restart, as device parameters needs to be updated, before making a decision
0828145456|cfg  |*|00|Prov|Setting device parameters from configuration files.
0828145456|cfg  |4|00|RT|cfgFlashUpdateFromConfig: Failed to update SerialConfig
0828145456|cfg  |*|00|Prov|Finished updating configuration
0828145456|so   |4|00|[MsgSoTR069Init] Start
0828145456|dectU|*|00|Initial log entry. Current logging level 4
0828145456|dectU|4|00|DECT_UPDATER SDectUpdaterS0: BaseEventInit: Wait, NotPaired
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said 'prov/polycom/64167f8373a5-app.log' is not present
0828145456|copy |4|00|Could not set the custom header Content-Range for HTTP/s request. Head request failed to get content-length of server file.
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said 'prov/polycom/64167f8373a5-app.log' is not present
0828145456|log  |4|00|UtilLogServerC::uploadFifoLog: upload error. protocol 0 result = 12
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-app.log' is not present
0828145456|copy |4|00|Could not set the custom header Content-Range for HTTP/s request. Head request failed to get content-length of server file.
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-app.log' is not present
0828145456|log  |4|00|UtilLogServerC::uploadFifoLog: upload error. protocol 0 result = -1
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said 'prov/polycom/64167f8373a5-boot.log' is not present
0828145456|log  |4|00|UtilLogServerC::uploadFifoLog: upload error. protocol 0 result = 12
0828145456|copy |*|00|Server 'pbx.pbxsevilla.com' said '64167f8373a5-boot.log' is not present
0828145456|log  |4|00|UtilLogServerC::uploadFifoLog: upload error. protocol 0 result = -1
0828145456|log  |4|00|Failed to upload boot log on start up.
0828145457|brow |*|00|Initial log entry. Current logging level 4
0828145458|dectU|4|00|DECT_UPDATER size of (updateStatusDetails) 384
0828145458|dectU|4|00|DECT_UPDATER Read Could not open file
0828145458|dect |*|00|RePairing with BS
0828145458|dect |4|00|Dect Feature not enabled!:0
0828145458|dect |*|00|Dect module is initialized changing state to  : 1, 
0828145504|clist|4|00|dbIO::processResult:no response
0828145505|em   |4|00|EMLayoutMgr::EMLayoutMgr- Initalization finished

0828145506|ec   |*|00|Initial log entry. Current logging level 4
0828145513|app1 |4|00|[AppExchangeUiC::populateAutoDiscoverUrl] Internal & External EWS url's are empty
0828145517|app1 |4|00|AppBrowserUiC::browserResetRebootFlag Setting the reboot flag to false for browser.

0828145517|app1 |4|00|AppBrowserUiC::configure() Enter
0828145517|app1 |4|00|AppBrowserUiC::configure() - Home url - [], idle url - []
0828145518|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Enter

0828145518|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Default

0828145518|brow |4|00|CWebLayoutMgr::handleProxyConfiguration Exit

0828145518|brow |4|00|Timezone value = EST5EDT,J67/2:0:0,J305/2:0:0, Browser state - 1, Visible - 0

0828145524|app1 |5|00|AppPhoneLockC::Init - bPhoneLockState [0]
0828145533|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145533|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145533|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145533|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145625|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145625|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145625|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145625|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145715|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145715|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145715|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145715|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145815|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145815|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145815|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145815|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145900|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145900|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145900|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145900|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828145932|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828145932|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828145932|sip  |4|00|MakeTlsConnection: connection failed error -1
0828145932|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828150008|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828150008|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828150008|sip  |4|00|MakeTlsConnection: connection failed error -1
0828150008|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828150057|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828150057|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828150057|sip  |4|00|MakeTlsConnection: connection failed error -1
0828150057|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828150121|cfg  |4|00|Web||ParamParser|Parameter identifier is out of range: "14791"(14791)
0828150121|cfg  |4|00|Web||ParamParser|Parameter identifier is out of range: "14791"(14791)
0828150143|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828150143|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828150143|sip  |4|00|MakeTlsConnection: connection failed error -1
0828150143|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828150203|pps  |4|00|sipTlsProfileCb is invoked with cause 2
0828150203|sip  |*|00|sipClearAllSockets
0828150203|tls  |*|00|Platform profile 1 is using Custom platform device certificate 1
0828150203|pps  |4|00|sipTlsProfileCb is invoked with cause 2
0828150203|app1 |4|00|appBrowserTlsProfileChgCb 
0828150203|sip  |*|00|sipClearAllSockets
0828150203|tls  |*|00|Platform profile 2 is using Custom platform device certificate 1
0828150203|pps  |4|00|sipTlsProfileCb is invoked with cause 0
0828150203|app1 |4|00|appBrowserTlsProfileChgCb 
0828150203|sip  |*|00|sipClearAllSockets
0828150203|app1 |4|00|appBrowserTlsProfileChgCb 
0828150203|cfg  |4|00|Web||ParamParser|Parameter identifier is out of range: "14791"(14791)
0828150203|cfg  |4|00|Web||ParamParser|Parameter identifier is out of range: "14791"(14791)
0828150227|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828150227|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828150227|sip  |4|00|MakeTlsConnection: connection failed error -1
0828150227|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828150302|pps  |4|00|sipTlsProfileCb is invoked with cause 4
0828150302|sip  |*|00|sipClearAllSockets
0828150302|pps  |4|00|sipTlsProfileCb is invoked with cause 4
0828150302|app1 |4|00|appBrowserTlsProfileChgCb 
0828150302|sip  |*|00|sipClearAllSockets
0828150302|pps  |4|00|sipTlsProfileCb is invoked with cause 4
0828150302|app1 |4|00|appBrowserTlsProfileChgCb 
0828150302|sip  |*|00|sipClearAllSockets
0828150302|app1 |4|00|appBrowserTlsProfileChgCb 
0828150302|cfg  |4|00|Web||ParamParser|Parameter identifier is out of range: "14791"(14791)
0828150302|cfg  |4|00|Web||ParamParser|Parameter identifier is out of range: "14791"(14791)
0828150325|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0828150325|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0828150325|sip  |4|00|MakeTlsConnection: connection failed error -1
0828150325|pps  |4|00|[PpsHybridC::OnEvSipOnFetchRootCert] m_lineIdx[1], m_stsuri[], m_username[], m_domain[]
0828150337|app1 |*|00|Event: Multiple Key Combo 1
0828150337|app1 |*|00|Manual Reboot
0828150337|app1 |4|00|Sending restart/reboot event to exchange
0828150337|app1 |4|00|AppBrowserUiC::browserSetRebootFlag Setting the reboot flag to true for browser.

0828150337|app1 |4|00|AppExchangeUiC::exchangeSetRebootFlag Setting the reboot flag to true for browser.

0828150337|brow |4|00|CWebLayoutMgr::Dismisss


0828150337|ec   |4|00|[EWS WebTicket] Stopped web ticket service
0828150337|ec   |4|00|Stopped access token service
0828150337|em   |4|00|EMLayoutMgr::handlePXmlMsg EM Shutdown in progress

0828150343|dbs  |5|00|CDbsLayoutMgr::Quit() - Enter
0828150343|acom |4|00|App "dbs" has failed to read a message, error number = 92
0828150343|acom |5|00|AppComServer encountered a connection error.
0828150343|acom |4|00|Application dbs from 127.0.0.1 [21934] has been disconnected.
0828150343|dbs  |5|00|CDbsLayoutMgr::Quit() - Exit
0828150343|em   |5|00|EMLayoutMgr::Quit() - Entry
0828150343|acom |4|00|App "em" has failed to read a message, error number = 92
0828150343|acom |5|00|AppComServer encountered a connection error.
0828150343|acom |4|00|Application em from 127.0.0.1 [23982] has been disconnected.
0828150343|em   |5|00|EMLayoutMgr::Quit() Disconnected event loop.
0828150345|em   |5|00|EMLayoutMgr::Quit() - Exit
0828150345|osd  |5|00|COsdLayoutMgr::Quit - Entry
0828150345|acom |4|00|App "osd" has failed to read a message, error number = 92
0828150345|acom |5|00|AppComServer encountered a connection error.
0828150345|acom |4|00|Application osd from 127.0.0.1 [24238] has been disconnected.
0828150345|osd  |5|00|COsdLayoutMgr::Quit - Exit
0828150345|brow |5|00|CWebLayoutMgr::Quit - Entry
0828150346|acom |4|00|Application ec from 127.0.0.1 [24494] has been disconnected.
0828150346|acom |4|00|Application browser from 127.0.0.1 [24750] has been disconnected.
0828150346|acom |4|00|Application spipgui from 127.0.0.1 [21678] has been disconnected.
0828150346|acom |5|00|AppComServer is exiting, cleaning up all connections.
0828150346|hw   |5|00|Task ended without calling rtosTaskEnd() name=tGuiAppCom
0828150346|ldap |*|00|ldapXfer::envDel: task delete OK
0828150346|app1 |*|00|AppC::appReboot cDynamicData shutdown complete
0828150346|AuthS|2|00|Request(-1)AuthSvc,(4)ServiceSetMsgKey,(-1),(-1),(Expiry,TransactionId,Time,Type):(-1,-1,1598641426,0)IndicationLevel:(200)
0828150346|clist|4|00|dbJson::requestSubmit:<DESTROY> - failed
0828150346|AuthS|2|00|ShutDown event is received, Running SMs(0)
0828150346|brow |5|00|CWebLayoutMgr::stopTimersAndSignals()- Enter
0828150346|brow |5|00|CWebLayoutMgr::stopTimersAndSignals()- Exit
0828150347|so   |*|00|SoNcasC::procMsg: Client service shutdown complete
0828150349|ec   |5|00|CEcLayoutMgr::Quit() - Entry
0828150349|ec   |5|00|QCoreApplication::exit() - Exit
0828150351|ec   |5|00|CEcLayoutMgr::Quit() - Exit
0828150413|wdog |*|00|Watchdog Expired: tSupObjs, 8
0828150413|log  |*|00|---------- Final log entry ----------

 

[chrispopp]

Seems that Polycoms do not support wildcard certificates. Going to enable Let's Encrypt to test.

[chrispopp]

Seems it doesn't work with Let'sEncrypt either:

0901162752|sip  |4|00|[cert_verify_callback,tcp]:Server certificate verification failed, Untrusted Certificate,error=19
0901162752|sip  |4|00|MakeTlsConnection: SSL_connect error 1
0901162752|sip  |4|00|MakeTlsConnection: SSL_connect failed 'error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed' err -1
0901162752|sip  |4|00|MakeTlsConnection: connection failed error -1

Changing it to UDP/TCP works. I also followed the tutorial where you need to register via HTTPS, but it doesn't help. Maybe a bug with the Certificate? 

 

 

[Vodia PBX]

You can double check with the browser if you see the "green light" (or lock) when you visit the PBX URL. If its green, its a sign that at least the browser understands the certificate. AFAIK the VVX 250 are different code than the original VVX devices, so it could be that their certificate management is different. IMHO the later models must include the X3 root CA that LE uses. If not, does importing it on the phone solve the problem? 

[chrispopp]

Yes, the certificate is working in the browser. I also manually uploaded the X3 cert from LetsEncrypt and it still not registering. I added both https://letsencrypt.org/certificates/ the RootCA and the Int Certificate just in case. Same resuult with the same error.

In their documentation they should support natively: ISRG Root X1 4096 bit sha256WithRSAEncryption Jun 4 11:04:38 2015 GMT Jun 4 11:04:38 2035 GM T

Page 10 : https://support.polycom.com/content/dam/polycom-support/products/voice/business-media-phones/other-documents/en/ucs-cert-update-5-9-0.pdf

 

[Vodia PBX]

Ok lets get a PCAP to get to the bottom of this. Maybe just attach it to a ticket. 

[ed_fr]

Hello,

I have same error....

Did you find a solution?

 

[Vodia PBX]

We are stilling trying to figure out what the VVX are doing... One major problem is that the LetsEncrypt intermediate certificate is also a Root CA (ISRG Root X1), even though in the chain it is not self-signed and the phone should proceed to the actual root CA. If you google for it, there is lots of talk about it and how this makes older Android versions work for a few more years. Anyhow, for the VVX it does not seem to do us any favor. The phone just does not accept the certificate not matter what we set up un the TLS settings. There is an alternative LE chain available, where the ISRG Root X1 is the Root CA (which might cause actually more problems), but this also does not work. We'll try to figure this out, but it might take some more time. 

[Vodia PBX]

If you want to try 68.0.5.beta this one contains a reworked Polycom template. Please make sure that you reset the Root CA list on the PBX, so that the ISRG Root X1 is there. 

[ed_fr]

thank you for your reply.

I am in production on this platform. I will do a sandbox to test later.

(it would be good to update the website to remove VVX250 compatibility, I lost more than a day of work on this problem.)

[IzzyG]

did you get the VVX to work with LetsEncrypt ?

[Vodia PBX]

I just tried on our own server. It took me an hour to figure out that the server certificate had expired and there was a domain certificate with the same name that was refreshed instead. Also I am not sure if my phone had problems because the DHCP server would set the NTP server and because of that would not have the current time for validating the certificate.

After that it worked well (firmware version 5.9.7.3480 on a VVX300). PBX Version 68.0.12.