Equinox setup 3

[PhoneDude20]

Server Edition 11.0 build 4.

I have the equinox setup and working if I use the URL (

http://ipofficefqdn/46xxsettings.txt).

The client wants to be able to have the users enter their email address to download the config file. I have created and verified their domain in Spaces. I have added the app "equinox Cloud Client". My question is the JSON config. I have found online notes on it but they do not seem to work. Here is what I have entered.

{{

“Client_Settings_File_Address”: [

{

“Profile_Name”: “Configuration for production users”,

“Client_Settings_File_Url”: “

http://ipofficefqdn/46xxsettings.txt”}

What am I missing?

When I save the JSON file I receive the following error.

Here is the what the client sees when they enter their email.

 

[derfloh]

Even if I know the exact file format there are two closing }} and one closing ] missing.

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

 

[sizbut]

Also using angled ˝ quotes rather than straight " quotes is a concern

Stuck in a never ending cycle of file copying.

 

[bdeltp]

I think the problem comes from the weird double quotes
Below an example in production and functional, modified with your fqdn :

[pre]
{
"Client_Settings_File_Address" : [
{
"Profile_Name": "Configuration for production users",
"Client_Settings_File_Url": "

https://ipofficefqdn/46xxsettings.txt"

}
]
}[/pre]

Make sure you can access the 46xxsettings with the url

https://ipofficefqdn/46xxsettings.txt

 

[PhoneDude20]

Thanks! I'll try that tonight. I am able to access the txt file using the link I have.

 

[PhoneDude20]

bdtp, that fixed the auto config. Thank You!!

Now I am getting an certificate error. Where can I create that? I did have a certificate that expired on 2-7-2020 but everything I read said I wouldn't need it anymore.

 

[bdeltp]

The certificate you are talking about is an old certificate that is no longer used today.
Look here

You have to generate identity certificate in 7071 interface according to you SIP Domain, and then inject root-ca.pem in you several devices

 

[bahmonkeys]

Your certificate in the trusted store is out of date. Delete the old one and update it to the latest one. You should be able to connect then. You should also switch over to HTTPS rather than HTTP

 

[derfloh]

bahmonkeys
Must not be the Server certificate. I guess the expired certificate is the old CA certificate.

Without the needed information it's hard to say what's wrong with the certificate.

If you are on 11.0.4 (not SP1 or SP2) the certificate generated by IP Office will not be valid. Check this post: [URL unfurl="true"]https://blog.fwilke.com/create-certificates-for-iphone-with-ip-office/[/url]

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

 

[bahmonkeys]

@derfloh
If you change an IP Address DNS or any major routes this will generate a certificate. All previous certificates are now obsolete

 

[PhoneDude20]

2 more questions for Equinox. I am able to enter an email address and it downloads the correct config and I am not getting any errors using a PC.

1)I would like to modify the dialing rules automatically as well. Is this done in the JSON string or do I have to create a specials txt file on the server?

2) I have installed and enabled the certs on my iPhone and able to log in using email but getting a "VoIP Certificate Problem" still?

 

[derfloh]

While the iPhone certificate store is used to validate the server certificate during download of 46xxsettings.txt for all other TLS connection the certificate downloaded from IPO (WebRootCA.pem) is used.

So you have to ensure that WebRootCA.pem contains the root certificate of the CA that issued the IPO certificate. If it's a root CA and an intermediate CA you have to merge them into an own WebRootCA.pem.

Regarding the dial rules... IX Workplace doesn't load 46xxspecials.txt.

Is recommended to copy the autogenerated 46xxsettings.txt with a web browser as ixsettings.txt (for example) and point the app to load that file through Spaces. Within the new file you can adjust any settings you need like dial plan rules or FNE settings as well.

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

 

[PhoneDude20]

Derfloh, creating a new txt file and pointing Spaces to it worked perfect. Thank you for that!!

I am still struggling with the iPhone cert though. I have downloaded the root-ca.pem cert, installed and enabled. Reinitialized equinox client but still getting the error. Attached is the cert I am downloading.

Is that the correct one? I believe I will need to merge them like you mentioned. How is that done? I am not that familiar with certs yet. Thank you for your help on this.

 

[derfloh]

If the IPO certificate is issued by IPO the root certificate should be available as WebRootCA.pem.

The 46xxsettings.txt should have "SET MYTRUSTCERT WebRootCA.pem" or similar. Then IX Workplace loads this file.

You can download it and change the file extension to .crt and you can open it.

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

 

[PhoneDude20]

Derfloh, I did a search in my 46xxsettings.txt file for SET MYTRUSTCERT and it is not there. Is this something I can manually add to my xisettings.txt file?

 

[derfloh]

I'm sorry. Must be

SET TRUSTCERTS WebRootCA.pem

You can also add it to your IX file if needed.

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

 

[PhoneDude20]

I have a ticket opened with Avaya on this and they are thinking it might be an ios issue running version 13. Has any one had any success running this on ios 13?


Derfloh, I do see SET TRUSTCERTS WebRootCA.pem in the 46xxsettings.txt file and the one I created ixsettngs.txt. I have created the new pem file by merging the root and cert files together. I used notepad++ to do this using the link below.

https://support.vidyocloud.com/hc/e...-Combining-Root-and-Intermediate-Certificates

I downloaded the cert.pem file and the root-ca.pem file, and pasted the root-ca.pem file to the bottom of the cert.pem on a new tab to merge them. I did a file save as and saved it as WebRootCA.pem. I emailed that cert to my cell phone. Downloaded and installed. Once it was installed I enabled it in the certificate trust settings. I then tried to setup the app and I still get the VoIP Cert error. Is there a problem with IOS 13 or am I doing something wrong? Again, everything works on the PC (inside or outside of the network)

 

[derfloh]

I did this on iOS 13.

Be aware that IX Workplace loads the WebRootCA.pem and uses it and not the certificates from the iPhone cert store. Certificate store is only used during download of the settings file.

You can check them in the IX Workplace app under Settings - Advanced - Certificates

You should see both certificates from your PEM file.


IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN

 

[PhoneDude20]

I am only seeing the 1 certification that I installed in IX.

 

[derfloh]

The it seems that the order of the certificates in your self created WebRootCA.pem seems to be wrong.

Do you see that the file is loaded?

IP Office remote service
Fixed price SIP trunk configuration
CLI based call blocking
SCN fallback over PSTN