I have 2 Yealink phones that will not even try to connect to the VPN. I’ve used Wireshark to watch for the connection and the phone does not even try.
Yealink SIP-T46U firmware version: 108.85.0.15
Yealink W60B firmware: 77.85.0.25 handset W56H
Here is my vpn.cnf file:
client
dev tun
dev-type tun
proto udp
remote xxx.xxx.xxx.xxx 1194 Public IP address followed by vpn port
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
comp-lzo
verb 3
ca (I had to remove the <> for the forum.)
-----BEGIN CERTIFICATE-----
… <---- ca key inserted here
-----END CERTIFICATE-----
/ca
I think there were changes made on recent firmwares that require a different directory structure of the VPN file. Certs and keys in different files or something like that.
I tried putting the ca, cert and the key in folder structure like /config/openvpn/keys/ then made a tar file. Then uploaded to the phone and it still didn’t work.
I use W60B and T42G
W60B does connect as expected (T42G does not anymore and I had no time to check why and when it stopped connecting). It was set up a few years ago.
W60B Firmware Version 77.81.0.35 Hardware Version 77.0.0.48.0.0.0
Server CA cert is SHA1
You may check if SHA1 is still a requirement and/or try.