<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
What’s the phone doing before this? There’s a number of things the phone can be doing related to certificates so look for some context, assuming that error is actually related to the unregistration. For a non-secure cluster and a cert error that preceeds
unregistration I would jump to the wireless security settings. Are those cert based in your network? Do you see the phones dropping off the wireless network at the time of the unregistration (or within 1-2 minutes to allow time for the sccp keepalive timeout)?
<div class="">
<div class=""><br class="">
</div>
<div class="">
<div class="">-Ryan </div>
<br class="">
<div>
<div class="">On Nov 19, 2015, at 9:57 AM, Jonathan Charles <<a href="mailto:jonvoip@gmail.com" class="">jonvoip@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">They were never on a secure cluster... it was 1.4.4.3 before... the issue was there before. We upgraded to try to resolve this issue...
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Jonathan</div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Thu, Nov 19, 2015 at 12:33 AM, Sreekanth Narayanan (sreenara)
<span dir="ltr" class=""><<a href="mailto:sreenara@cisco.com" target="_blank" class="">sreenara@cisco.com</a>></span> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72" class="">
<div class="">
<p class="MsoNormal"><span style="font-family:"Calibri Light",sans-serif;color:#002060" class="">Did you start seeing this issue only after upgrading the firmware?<u class=""></u><u class=""></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri Light",sans-serif;color:#002060" class="">What was the firmware they were running before?<u class=""></u><u class=""></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri Light",sans-serif;color:#002060" class=""><u class=""></u> <u class=""></u></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri Light",sans-serif;color:#002060" class="">Were these phones moved from a secure cluster to this one?<u class=""></u><u class=""></u></span></p>
<p class="MsoNormal"><a name="1511e7286198b394__MailEndCompose" class=""><span style="font-family:"Calibri Light",sans-serif;color:#002060" class=""><u class=""></u> <u class=""></u></span></a></p>
<p class="MsoNormal"><b class=""><span style="font-size:11.0pt;font-family:"Calibri",sans-serif" class="">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif" class=""> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank" class="">cisco-voip-bounces@puck.nether.net</a>]
<b class="">On Behalf Of </b>Jonathan Charles<br class="">
<b class="">Sent:</b> Thursday, November 19, 2015 7:10 AM<br class="">
<b class="">To:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank" class="">
cisco-voip@puck.nether.net</a><br class="">
<b class="">Subject:</b> [cisco-voip] 7925s and 7921s losing registration<u class=""></u><u class=""></u></span></p>
<div class="">
<div class="h5">
<p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div class="">
<pre class="">2015-11-18 19:44:13:0140 CP-7925G user.err secd: SSL_accept:error in SSLv3 read client certificate A <u class=""></u><u class=""></u></pre>
<pre class="">2015-11-18 19:44:13:0140 CP-7925G user.err secd: SSL_accept:error in SSLv3 read client certificate A <u class=""></u><u class=""></u></pre>
<pre class="">2015-11-18 19:44:16:0350 CP-7925G user.err secd: SSL_accept:error in SSLv3 read certificate verify A <u class=""></u><u class=""></u></pre>
<pre class="">2015-11-18 19:44:16:0420 CP-7925G user.err secd: SSL_accept:error in SSLv3 read client certificate A <u class=""></u><u class=""></u></pre>
<pre class="">2015-11-18 19:44:16:0420 CP-7925G user.err secd: SSL_accept:error in SSLv3 read client certificate A <u class=""></u><u class=""></u></pre>
<pre class="">2015-11-18 19:44:28:0850 CP-7925G user.err secd: SSL_accept:error in SSLv3 read client certificate A <u class=""></u><u class=""></u></pre>
<pre class="">2015-11-18 19:44:28:0850 CP-7925G user.err secd: SSL_accept:error in SSLv3 read client certificate A <u class=""></u><u class=""></u></pre>
<pre class=""><u class=""></u> <u class=""></u></pre>
<p class="MsoNormal"><span style="color:#1f497d" class="">I upgraded the 7925s to 1.4.7.3<u class=""></u><u class=""></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d" class="">and the 7921s to 1.4.6.3
</span><u class=""></u><u class=""></u></p>
<pre class="">The cluster is NOT secure.<u class=""></u><u class=""></u></pre>
<pre class=""><u class=""></u> <u class=""></u></pre>
<pre class="">Any ideas on why these would be coming up as rejected?<u class=""></u><u class=""></u></pre>
<pre class=""><u class=""></u> <u class=""></u></pre>
<pre class=""><u class=""></u> <u class=""></u></pre>
<pre class=""><u class=""></u> <u class=""></u></pre>
<pre class="">Jonathan<u class=""></u><u class=""></u></pre>
<pre class=""><u class=""></u> <u class=""></u></pre>
<p class="MsoNormal"><span style="color:#1f497d" class=""> </span><u class=""></u><u class=""></u></p>
<pre class=""><u class=""></u> <u class=""></u></pre>
<pre class=""><u class=""></u> <u class=""></u></pre>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
_______________________________________________<br class="">
cisco-voip mailing list<br class="">
<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
https://puck.nether.net/mailman/listinfo/cisco-voip<br class="">
</div>
</div>
<br class="">
</div>
</div>
</body>
</html>