Avaya SBC Not sending certificates to peer.

[walruses]

Hi, does anyone have an opinion about this issue?

I have installed certificates in my SBC so I can connect to Genesys. In a TLS trace I can see that I am receiving Genesys certificates but I am not sending mine. I have checked interfaces, profiles, network flows and I can not see where the problem is.

Any Idea?

Best regards.

 

[Arlo555]

Can you provide an example from a tracesbc? What is the exact error? What is the SBC release?

 

[walruses]

Hi Arlo555, in a trace my provider sais that I should be sending a key as in the example attached (key). Plus he sais I am not sending my CA cert I got an error as in the image attached (cert)

 

[biglebowski]

Check that you’ve uploaded the correct root CA / bundle to EMS

I had similar problems with some comodo certs as they had so many root CAs finding the right one was a mare

 

[Arlo555]

Walruses,

I agree with biglebowski, Try this display filter(tls.handshake.type == 11) You should be able to see the certificate being offered by Genesis. If you click into the Transport Layer Security in the packet details pane you can verify the root CA you need to load on your SBC and set in the TLS profile. You can read it faster in a tracesbc though. Best of Luck.

 

[walruses]

Thank you very much biglebowski, Arlo555, certificates were right from Genesys and Avaya but it was necessary to apply a TLS Client and Server Profile in Sip Server and Network Flow so Avaya certificate could be added in the tls handshake.