Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-21179

Older OpenSSL version causes TLS failure with some phones

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Asterisk SIP Settings
    • Labels:
      None
    • Asterisk Version:
      16.6.2
    • Distro Version:
      14, 15
    • Distro:
      FreePBX Distro

      Description

      Yealink and Grandstream phones are intermittently unable to register via TLS with PJSIP. Asterisk logs: 

      
WARNING[9966] pjproject: SSL SSL_ERROR_SSL (Read): Level: 0 err: <218910881> <asn1 encoding routines-ASN1_item_verify-unknown message digest algorithm> len: 32000 peer: 70.177.20.8:50095

      The PBX then terminates the connection with the phone and never lets it register. Other forum users have fixed this by manually upgrading the version of OpenSSL on the PBX to 1.0.2u.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                ethanberg Ethan Berg
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:

                  NextupJiraPlusStatus

                  Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.