Problem with Bria 4/XMPP on new 19.04 install
Burleigh, Matt
I am building a new 19.04 install and everything was going fine until this morning. The only user I have is connected with Bria 4 and it seems that XMPP/Presence is no longer working. The SIP account is working fine.
According to Bria logs the server’s certificate is being rejected. The server is using self-signed certificates at this time and I had made no change to them. I did try rebuilding the certificate but still not working. I was configuring the SIP Security at the time but have backed out all changes and still no luck. Do I need to import the self-signed CA certificate from server into my Windows instance?
Bria Logs:
02/08/2019 09:48:14.002 | 4060 | DEBUG | 84929 starting TLS handshake... | CPCAPI2 | XmppStackLog.cpp:49
02/08/2019 09:48:14.001 | 4060 | ERROR | 84929 peer certificate validation failure: unable to get local issuer certificate | CPCAPI2 | tlsopensslbase.cpp:321
02/08/2019 09:48:14.001 | 4060 | DEBUG | 84929 additional validation checks may have failed but only one is ever logged - please check peer certificate carefully | CPCAPI2 | tlsopensslbase.cpp:322
02/08/2019 09:48:14.001 | 4060 | DEBUG | 84929 matchCertificateName: name=sipx.example.com, server=sipx.example.com, result=1 | CPCAPI2 | tlsopensslbase.cpp:304
02/08/2019 09:48:14.001 | 4060 | DEBUG | 84929 TLS certificate validation failed - status: 1 | CPCAPI2 | XmppAccountImpl.cpp:900
02/08/2019 09:48:14.001 | 4060 | DEBUG | 84929 TLS info - version: TLSv1.2 | CPCAPI2 | XmppAccountImpl.cpp:902
02/08/2019 09:48:14.001 | 4060 | ERROR | 84929 Server's certificate rejected! | CPCAPI2 | XmppStackLog.cpp:45
02/08/2019 09:48:14.001 | 4060 | DEBUG | 84929 ConnectionTCPBase::disconnect() called | CPCAPI2 | XmppStackLog.cpp:49
02/08/2019 09:48:14.001 | 4060 | DEBUG | 84929 ConnectionTCPBase::cleanup() closing socket 2892 | CPCAPI2 | XmppStackLog.cpp:49
02/08/2019 09:48:14.001 | 4060 | INFO | 84929 Disconnected 512: gloox error=13 | CPCAPI2 | XmppAccountImpl.cpp:859
Burleigh, Matt
So it appears the answer is to import the self-signed CA from the sipXcom server into the Trusted Root Certification Authorities on the Windows 7 client computer. This allowed Bria 4 to successfully connect to XMPP service. Not sure why it worked for a while without doing this…
I copied the CA certificate from sipXcom Certificates/Certificate Authorities page (with Show certificate enabled). Then pasted into a text file and named it “sipxcom-ca.cer”. Right clicked on it, choose Install certificate to launch Certificate Import Wizard and then selected Place all certificates in the follow store, browsed to and selected Trusted Root Certification Authorities.
Hope this helps someone else.
--
You received this message because you are subscribed to the Google Groups "sipxcom-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
sipxcom-user...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/sipxcom-users/747E093E4580C0408181E6DB5B4F2D92011E9DB3C6%40EX2010-01.eiisolutions.net.