Hi all, we run into a problem with our wildcard SSL cert. setup on a Audiocodes SBC.
We had a working solution on our test wildcard with multiple O365 tenants. We changed our wildcard cert on the audiocodes and added the new domain in O365, after that we added the FQDN of the SBC. But now the TLS status of the SBC remains on inactive. Below the steps we did that caused the issue and some steps to try to resolve the issue.
-added domain x51ek4.dr-ms.onecentral.net
-added a user in this new domain so it becomes active
-added SBC x51ek4.dr-ms.onecentral.net:5139
-SBC is connected to O365 and working as expected for our test tenants and users.
-deleted SSL cert *.dr-ms.onecentral.net in the audiocodes SBC
-added new ssl cert *.voice365.onecentral.net in the audiocodes SBC
-added domain x51ek4.voice365.onecentral.net
-added a user in this new domain so it becomes active
-added SBC x51ek4.voice365.onecentral.net:5139
-The old SBC x51ek4.dr-ms.onecentral.net 5139 remains with an active TLS status, the new SBC x51ek4.voice365.onecentral.net:5139 remains inactive. Our tenants cant use the new SBC.
-deleted the old SBC x51ek4.dr-ms.onecentral.net:5139 in O365
-changed the port number of our new SBC to x51ek4.voice365.onecentral.net:5888. TLS status remains inactive but we can use the SBC for outgoing calls. O365 doesn't respond to inbound SIP invites or SIP options. most likely due to the TLS status in O365. In the Audiocodes I see the following in the log:
"TLS handshake success. Resending message succeeded after retrying 12 times"
-deleted old SBC x51ek4.dr-ms.onecentral.net:5139
-deleted old domain x51ek4.dr-ms.onecentral.net
-deleted new SBC x51ek4.voice365.onecentral.net:5888
-Added new SBC x51ek4.voice365.onecentral.net:5888 after a couple of hours hoping this would resolve the issue, unfortunately it didn't.
Hope someone can help us resolve this issue, because I cant think of any steps we didn't try so far.
Best regards,
Michael
