[asterisk-bugs] [JIRA] (ASTERISK-30470) Cisco SPA3XX and SPA5XX not register with PJSIP TLS and LE certs

[Asterisk Team (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-30470?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=261557#comment-261557 ] 

Asterisk Team commented on ASTERISK-30470:
------------------------------------------

The severity of this issue has been automatically downgraded from "Blocker" to "Major". The "Blocker" severity is reserved for issues which have been determined to block the next release of Asterisk. This severity can only be set by privileged users. If this issue is deemed to block the next release it will be updated accordingly during the triage process.

> Cisco SPA3XX and SPA5XX not register with PJSIP TLS and LE certs
> ----------------------------------------------------------------
>
>                 Key: ASTERISK-30470
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30470
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: pjproject/pjsip
>    Affects Versions: 18.9.0, 18.16.0, 18.17.0
>         Environment: Debian 11 Bulleye with latest updates
>            Reporter: Dmitry Shleg
>            Severity: Major
>
> I trying to migrate from asterisk 13 chan_sip to asterisk 18 with pjsip channel driver. I has ~300 Cisco SPA devices with 7.6.2e like a SR5 firmware
> i has three test enviroments(LetsEncrypt certs ):
> 1. (prod)VM CentOS7 + asterisk 13 ( chan_sip ) - not register problems
>   chan_sip configured with tlsdontverifyserver=no, tlsclientmethod=tlsv1 
> 2. (test)VM with latest FreePBX distro ( asterisk 18.13 + FreePBX 14)
>     pjsip driver by default works with param: method=tlsv1_2 and when phone connects to asterisk i got error:
> SSL SSL_ERROR_SSL (Handshake): Level: 0 err: <336027900> <SSL routines-SSL23_GET_CLIENT_HELLO-unknown protocol
> after change to method=sslv23, devices registers without problems
> 3. (test)VM Debian 11 + Asterisk installed from source 
> in any param method(default, sslv23, tlsv1, tlsv1_2) console says:
> SSL routines-tls_early_post_process_client_hello-unsupported protocol
> Please describe right direction to fix it.



--
This message was sent by Atlassian JIRA
(v6.2#6252)