Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Equinox setup 3

Status
Not open for further replies.

PhoneDude20

Vendor
Feb 12, 2020
33
US
Server Edition 11.0 build 4.

I have the equinox setup and working if I use the URL ( The client wants to be able to have the users enter their email address to download the config file. I have created and verified their domain in Spaces. I have added the app "equinox Cloud Client". My question is the JSON config. I have found online notes on it but they do not seem to work. Here is what I have entered.

{{

“Client_Settings_File_Address”: [

{

“Profile_Name”: “Configuration for production users”,

“Client_Settings_File_Url”: “
What am I missing?

When I save the JSON file I receive the following error.

Capture1_nrtccq.png


Here is the what the client sees when they enter their email.

Capture_rwh17i.png
 
Also using angled ˝ quotes rather than straight " quotes is a concern

Stuck in a never ending cycle of file copying.
 
I think the problem comes from the weird double quotes
Below an example in production and functional, modified with your fqdn :

[pre]
{
"Client_Settings_File_Address" : [
{
"Profile_Name": "Configuration for production users",
"Client_Settings_File_Url": " }
]
}[/pre]

Make sure you can access the 46xxsettings with the url
 
Thanks! I'll try that tonight. I am able to access the txt file using the link I have.
 
bdtp, that fixed the auto config. Thank You!!

Now I am getting an certificate error. Where can I create that? I did have a certificate that expired on 2-7-2020 but everything I read said I wouldn't need it anymore.

Capture2_gdvh3b.png
 
The certificate you are talking about is an old certificate that is no longer used today.
Look here

You have to generate identity certificate in 7071 interface according to you SIP Domain, and then inject root-ca.pem in you several devices
 
Your certificate in the trusted store is out of date. Delete the old one and update it to the latest one. You should be able to connect then. You should also switch over to HTTPS rather than HTTP
 
bahmonkeys
Must not be the Server certificate. I guess the expired certificate is the old CA certificate.

Without the needed information it's hard to say what's wrong with the certificate.

If you are on 11.0.4 (not SP1 or SP2) the certificate generated by IP Office will not be valid. Check this post: [URL unfurl="true"]https://blog.fwilke.com/create-certificates-for-iphone-with-ip-office/[/url]

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN
 
@derfloh
If you change an IP Address DNS or any major routes this will generate a certificate. All previous certificates are now obsolete
 
2 more questions for Equinox. I am able to enter an email address and it downloads the correct config and I am not getting any errors using a PC.

1)I would like to modify the dialing rules automatically as well. Is this done in the JSON string or do I have to create a specials txt file on the server?

2) I have installed and enabled the certs on my iPhone and able to log in using email but getting a "VoIP Certificate Problem" still?
 
While the iPhone certificate store is used to validate the server certificate during download of 46xxsettings.txt for all other TLS connection the certificate downloaded from IPO (WebRootCA.pem) is used.

So you have to ensure that WebRootCA.pem contains the root certificate of the CA that issued the IPO certificate. If it's a root CA and an intermediate CA you have to merge them into an own WebRootCA.pem.

Regarding the dial rules... IX Workplace doesn't load 46xxspecials.txt.

Is recommended to copy the autogenerated 46xxsettings.txt with a web browser as ixsettings.txt (for example) and point the app to load that file through Spaces. Within the new file you can adjust any settings you need like dial plan rules or FNE settings as well.

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN
 
Derfloh, creating a new txt file and pointing Spaces to it worked perfect. Thank you for that!!

I am still struggling with the iPhone cert though. I have downloaded the root-ca.pem cert, installed and enabled. Reinitialized equinox client but still getting the error. Attached is the cert I am downloading.

Capture_bzleiv.png


Is that the correct one? I believe I will need to merge them like you mentioned. How is that done? I am not that familiar with certs yet. Thank you for your help on this.
 
Derfloh, I did a search in my 46xxsettings.txt file for SET MYTRUSTCERT and it is not there. Is this something I can manually add to my xisettings.txt file?
 
I have a ticket opened with Avaya on this and they are thinking it might be an ios issue running version 13. Has any one had any success running this on ios 13?


Derfloh, I do see SET TRUSTCERTS WebRootCA.pem in the 46xxsettings.txt file and the one I created ixsettngs.txt. I have created the new pem file by merging the root and cert files together. I used notepad++ to do this using the link below.


I downloaded the cert.pem file and the root-ca.pem file, and pasted the root-ca.pem file to the bottom of the cert.pem on a new tab to merge them. I did a file save as and saved it as WebRootCA.pem. I emailed that cert to my cell phone. Downloaded and installed. Once it was installed I enabled it in the certificate trust settings. I then tried to setup the app and I still get the VoIP Cert error. Is there a problem with IOS 13 or am I doing something wrong? Again, everything works on the PC (inside or outside of the network)
 
I did this on iOS 13.

Be aware that IX Workplace loads the WebRootCA.pem and uses it and not the certificates from the iPhone cert store. Certificate store is only used during download of the settings file.

You can check them in the IX Workplace app under Settings - Advanced - Certificates

You should see both certificates from your PEM file.


IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top