[cisco-voip] 79xx and Firmware 9-2-1

[Mike King]

I have one of those sinking feelings in my stomache...........


(Clip of the phone web interface)

1856: NOT 18:01:32.717962 SECD: tvsReqAuthenticateCertificate: Received the
response from TVS proxy, status: 1
1857: ERR 18:01:32.719531 SECD: Authentication failed for the HTTPS conn
via TVS
1858: NOT 18:01:32.720438 SECD: srvr_cert_vfy:  ** srvr cert verify FAILED
** <10.1.1.1>
1859: ERR 18:01:32.721527 SECD: EROR:clpState: SSL3 alert
write:fatal:handshake failure:<10.1.1.1>
1860: ERR 18:01:32.722625 SECD: EROR:clpSetupSsl: ** SSL handshake failed,
<10.1.1.1> c:9 s:11
1861: ERR 18:01:32.723402 SECD: EROR:clpSetupSsl: SSL/TLS handshake failed,
<10.1.1.1> c:9 s:11
1862: ERR 18:01:32.724086 SECD: EROR:clpSetupSsl: SSL/TLS setup failed,
<10.1.1.1> c:9 s:11
1863: ERR 18:01:32.724720 SECD: EROR:clpSndStatus: SSL CLNT ERR,
srvr<10.1.1.1>
1864: ERR 18:01:32.725353 SECD: EROR:secErr_errStr:  *** bad err table ***
1865: ERR 18:01:32.726020 SECD: EROR:secErr_errStr: ** SEC-ERR: code:3(N/A)
subcode:9(UNKNOWN_CERT)
1866: ERR 18:01:32.726704 SECD: EROR:clpSndStatus: ** SEC-ERR: desc <HTTPS
cert failed auth via TVS>
1867: ERR 18:01:32.727436 SECD: EROR:clpWriteToClntSock: write() err, clnt
closed ?!, errno 32, <10.1.1.1> c:9 s:11
1868: ERR 18:01:32.728124 SECD: EROR:clpSndStatus: failed to send SSL/TLS
conn status, <10.1.1.1> c:9 s:11
1869: NOT 18:01:32.730813 SECD: clpDelClnt: closing conn to <10.201.27.5>,
c:14, s:-1
1870: NOT 18:01:32.731684 SECD: clpDelClnt: Closing the local socket now

1871: NOT 18:01:32.740853 SECD: clpDelClnt: closing conn to <10.1.1.1>,
c:9, s:11
1872: NOT 18:01:32.742630 SECD: clpDelClnt: Closing the local socket now





On Wed, Jan 4, 2012 at 6:17 PM, Mike King <me at mpking.com> wrote:

> I've seen mention of TVs failure on the logs. What impact would that be?
> On Jan 4, 2012 6:08 PM, "Dennis Heim" <Dennis.Heim at cdw.com> wrote:
>
>>  I know I have seen that where there were issues with SBD/TVS
>> certificate issues in the past.****
>>
>> ** **
>>
>> Dennis Heim
>> Senior Engineer (Unified Communications)
>> CDW  Advanced Technology Services
>> 10610 9th Place
>> Bellevue, WA 98004
>>
>> 425.310.5299 Single Number Reach (WA)****
>>
>> 317.569.4255 Single Number Reach (IN)
>> 317.569.4201 Fax
>> dennis.heim at cdw.com*
>> *cdw.com/content/solutions/unified-communications/<http://www.cdw.com/content/solutions/unified-communications/>
>> ****
>>
>> ** **
>>
>> *From:* cisco-voip-bounces at puck.nether.net [mailto:
>> cisco-voip-bounces at puck.nether.net] *On Behalf Of *Mike King
>> *Sent:* Wednesday, January 04, 2012 3:04 PM
>> *To:* Cisco VoIPoE List
>> *Subject:* [cisco-voip] 79xx and Firmware 9-2-1****
>>
>> ** **
>>
>> I'm having a weird problem with our 7900's (7941/7945 7961/7965)****
>>
>> The Corporate Directory won't work on some of the phones.   (We've
>> eliminated everything but the phone's themselves, I actually have two
>> phones, on the same subnet, one exhibits behavior, one doesn't)****
>>
>> ** **
>>
>> It says "requesting...." then eventually says Host does not respond.****
>>
>> ** **
>>
>> We finally decided to try downgrading the phone back to 9.1.1 SR1s.  ****
>>
>> ** **
>>
>> The phones that don't display the corporate directory, they also don't
>> downgrade.****
>>
>> ** **
>>
>> I've Reset/Restarted from CM****
>>
>> I've done the **#** from the keypad****
>>
>> I've unplugged the phone, and plugged it back in.****
>>
>> I've unplugged the phone, waited 5 minutes, and plugged it back in.
>> Doesn't downgrade.****
>>
>> ** **
>>
>> I tried a factory reset, (# key, then 123456789*0#) and the phone will
>> then download the correct version.  (I guess it has to at this point)****
>>
>> ** **
>>
>> (And the corporate directory started working again.)****
>>
>> ** **
>>
>> Idea's besides visiting every phone?****
>>
>> ** **
>>
>> ** **
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120104/2c55f755/attachment.html>