• ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Windows update impacting certain printer icons and names. Microsoft is working on a solution.
    Click here to learn more
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
The HP Community is where owners of HP products, like you, volunteer to help each other find solutions.
HP Recommended

I have a Polycom Browser application I'd like to expose via SSL on our fleet of VVX 500s.  The server uses certficates supplied by StartSSL.  This includes and intermediate and a root SSL.  I added both of those to the Platform CA slots.  This seemed to get rid of debug errors indicating the certificate root wasn't trusted.

 

However, I am unable to get past this:

 

0303175825|brow |4|00|Browser has encountered a SSL error [Id:22]The host name did not match any of the valid hosts for this certificate
0303175825|brow |4|00|[SSL handshake failed] - [https://api.xyz.com/custom/parkingorbit/index.xhtml]

 

When I validate the certificate URL using an external service (such as http://www.sslshopper.com/ssl-checker.html), I get the correct Host Name / SAN on the certificate.  The page also displays just fine on other browsers.

 

Yet nothing I can do seems to clear the error on the VVX phones, which displays as "SSL/TLS handshake failed".

 

Any ideas on how I may be able to resolve this?

5 REPLIES 5
HP Recommended

Hello joshelson ,

  • What Software Version have you installed on your VVX?
  • Is this a wildcard certificate?

I would suggest to lower the "brow" and "curl" log level to 2 and then repeat the test and check the logs.

 

Best Regards

Steffen Baier

Polycom Global Services

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
HP Recommended

I am running  PolycomVVX-VVX_500-UA/4.0.2.11307.  I couldn't find any known issues with this version that would affect SSL CA root processing.

 

This is NOT a wildcard certificate, though I do use several alternate names in the certificate.  The CN= name is the root of the URL I am trying to access.

 

I will turn down the debug and give it another shot and report back.

HP Recommended

I turned up brow and curl to give me most information. All I got was the same:

 

0304194429|brow |4|00|Browser has encountered a SSL error [Id:22]The host name did not match any of the valid hosts for this certificate
0304194429|brow |4|00|[SSL handshake failed] - [https://api.xxx.com/custom/parkingorbit/index.xhtml]

 

Any other ideas on what might cause this?  Or any other things I can do to resolve?

HP Recommended

Hello joshelson ,

 

the next official step is to raise this with your Polycom reseller to bring it to the attention of Polycom support.

 

If this is not possible please follow up the instructions within my signature.

 

Best Regards

 

Steffen Baier

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN
HP Recommended

Browser has encountered a SSL error [Id:22]The host name did not match any of the valid hosts for this certificate
[SSL handshake failed] - [https://api.xyz.com/custom/parkingorbit/index.xhtml]

 

As you have probably noticed in a normal web browser by now that the DNS part or IP address of the URL used to access the webpage must exactly match one of the certificates alternate names.  So if the phone is accessing the webpage via an IP address, but the IP address is not in the certificate, this error would be raised.

 

Yes, i know this is very old.

† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.