[Linphone-users] TLS handshake failiure

[Dennis Filder]

On Tue, Sep 07, 2021 at 04:22:18PM -0500, Trent Creekmore wrote:
> Well, SSL is used for https.
>
> In FreePBX it has a Certificate manager which allows the use of
> certificates, not only for SSL in the PBX web interface, but also be used
> for TLS in SIP..
>
> As I have mentioned when first set up this TLS connection some months ago,
> it was connecting. Certificate still valid.
>
> I did not mention I am using Android client.
>
> Here is more of the log (redacted a bit)
>
> 2021-09-07 14:06:08:999 [org.linphone/belle-sip] MESSAGE Trying to connect
> to [TLS://::ffff:2myIP Address:5061]
> (...)
> 2021-09-07 14:06:09:181 [org.linphone/belle-sip] ERROR Cannot connect to
> [TLS://pbx.domain:5061]
> 2021-09-07 14:06:09:181 [org.linphone/belle-sip] MESSAGE
> channel[0x784aec40]: entering state ERROR

Nothing here clues me in further.  I can just reiterate:

* Check if the Sectigo RSA Domain Validation Secure Server CA is
  installed on the Android client and that the fingerprints are
  identical.

* Try if you can configure FreePBX to send the entire certificate
  chain.

* Beyond that you will have to look at the wire and/or try your luck
  with s_client.

Regards.