Freepbx 17 w/ s705 endpoint Openvpn TLS v1.2 support?

Sangoma Hardware Phones
1

Is anyone currently using s705 endpoints on Freepbx 17 with Openvpn via EPM?

My conclusion is that Openvpn v2.6.3 simply can not be forced to use TLSv1, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-SHA, 2048 bit RSA.

Sangoma claims the s705 phone supports TLS v1.2. but I can not force the phone to connect any higher using the ovpn file manually or with EPM. Does anyone have insights on the client side openvpn version and what it actually supports?

The s705 is running latest firmware v3.0.4.91.

2

bump, have this same issue.

Brand new freepbx17 install on latest debian and cannot get S series phones to connect via openvpn.

3

im having the same problem with a fresh 17 install

4

yeah it’s crazy sangoma is doing nothing to address this.

The phone is using openvpn 2.2 and the server is currently 2.6.3.

I tried opening a ticket but since i didnt buy any support hours, they closed it.

This is holding back upgrading many systems due to the fact many people are still using S Series phones with OpenVPN. Sad.

5

For S Phones doesn’t required Support hours. at the past time it was free support.
Maybe they are closed because S Phones are EOL.

6

Yea this is unfortunate they didn’t push one last firmware update for the S series phones with a newer version of openvpn before the eol. The only conclusion is to run a standalone openvpn server that supports the 2.2v the endpoints are using. Cumbersome but do-able. Support naturally advised against downgrading the server side. You can not from what i’ve dug through and tried set explicit configs on the newer server version to work with the 2.2v endpoints. Ive exhausted all options and simply swapped my endpoint with a P series phone for now. Good Luck All!

7

Hi All

Thanks for reporting this issue, added to our queue to reproduce in-house.

Raised [bug]: Freepbx 17 w/ s705 endpoint Openvpn TLS v1.2 support? · Issue #712 · FreePBX/issue-tracker · GitHub to keep track of this issue. Feel free to update this issue with any further detail which can help us to reproduce/fix the issue.

Best Regards
Kapil

1 Like
8

Thank you Kapil.