PJSIP TLS with Let's encrypt on Yealink T46S

[dsubs (D rajan)]

I am using EPM for phone management.

Last night, I did some pending system updates on the system to see if that would make TLS work on the Let’s encrypt. That included some updates to openssl package. The client wants to use Let’s encrypt instead of Sectigo. That’s the reason I am trying to make it work with Let’s encrypt.

Now after the updates, it does not work even on the sectigo.

Same error: asni1 encoding routines/verify unknown message digest algorithm. Some old related tickets/posts on similar problems given below.

https://issues.freepbx.org/browse/FREEPBX-18222

Yealink T4XG phones will not autoprovision over HTTPS with FreePBX 14

Not using Endpoint Manager Using a T46G: I have the following files y000000000028.cfg and 001565649346.cfgin /tftpboot Using a T42G: I have the following files y000000000029.cfg and 00156565fb3c.cfg in /tftpboot New install FreePBX 14 is setup with a valid LE cert New install FreePBX 13 is setup with a valid LE cert Upgraded FreePBX 13 to FreePBX 14 install is setup with a valid LE cert Phones are on a network listed as trusted. SysAdmin Port Management is configured as pictured in all th…

I just want to find out if anyone got this working with some manual interventions or not.

Another unrelated question: Could I just make one endpoint UDP and the second endpoint TLS on the PJSIP? I am thinking if I could just configure the transport as “Auto” in the extension settings, I could register one endpoint with UDP and the second endpoint with TLS. Since, the media encryption is setting is common for both endpoints, if I configure that as SRTP, I guess I could make the UDP endpoint work with SRTP as SRTP can be used with any transport.