vitalissimo
Systems Engineer
Hi all!
I'm trying to configure 9611G phone in SIP mode to work with my private SIP server. I configured Kamailio with certificates from LetsEncrypt; the soft phones like Baresip+ and LinPhone on my Android phone can connect successfully, but the Avaya phone doesn't. In the Kamailio log file I see alert about unknown CA which comes from the phone; ssldump also reports that connection is being canceled by the phone with the notification about unknown CA. So, I downloaded root and intermediate certificates from LetsEncrypt ( and set the options in Avaya configuration file: SET TRUSTCERTS x1.pem,r3.pem (though the LE certificates supposed to be trusted by default, according to this page). According to the server logs both files get downloaded by the phone:
[pre][08/Jan/2023:21:00:39 +0100] "GET /x1.pem HTTP/1.1" 200 1954 "-" "Mozilla/4.0 (compatible; MSIE 6.0) AVAYA/9611-7.1.15.2.1 (MAC:xxxxxxxx)"
[08/Jan/2023:21:00:39 +0100] "GET /r3.pem HTTP/1.1" 200 1856 "-" "Mozilla/4.0 (compatible; MSIE 6.0) AVAYA/9611-7.1.15.2.1 (MAC:xxxxxxxx)"[/pre]
Still, the phone doesn't connect and the error 'unknown ca' is still there.
Any advice?
Thanks!
I'm trying to configure 9611G phone in SIP mode to work with my private SIP server. I configured Kamailio with certificates from LetsEncrypt; the soft phones like Baresip+ and LinPhone on my Android phone can connect successfully, but the Avaya phone doesn't. In the Kamailio log file I see alert about unknown CA which comes from the phone; ssldump also reports that connection is being canceled by the phone with the notification about unknown CA. So, I downloaded root and intermediate certificates from LetsEncrypt ( and set the options in Avaya configuration file: SET TRUSTCERTS x1.pem,r3.pem (though the LE certificates supposed to be trusted by default, according to this page). According to the server logs both files get downloaded by the phone:
[pre][08/Jan/2023:21:00:39 +0100] "GET /x1.pem HTTP/1.1" 200 1954 "-" "Mozilla/4.0 (compatible; MSIE 6.0) AVAYA/9611-7.1.15.2.1 (MAC:xxxxxxxx)"
[08/Jan/2023:21:00:39 +0100] "GET /r3.pem HTTP/1.1" 200 1856 "-" "Mozilla/4.0 (compatible; MSIE 6.0) AVAYA/9611-7.1.15.2.1 (MAC:xxxxxxxx)"[/pre]
Still, the phone doesn't connect and the error 'unknown ca' is still there.
Any advice?
Thanks!