Hello Mukesh, You cannot have cube listening on two different ports at the same time unfortunately. That would be a nice feature to have. You can send outgoing sip messages to multiple ports though Regards, Christos ... View more

Indeed! Thanks for the info Sergey. Then in theory I do not see why you would need to have the ctl file if you only need to connect to the CAPF to generate an LSC The CTL is typically used for encryption and media But in practice  you will need to set the cluster security mode to mixed and as soon as you do that the ctl file will be created and pushed to the phones. That's what I think but it is just a mental exercise for me :) I have never done it Regards, Christos ... View more

Sergey, Correct me if I am wrong. You want to push the LSC certificate to the phone (through CAPF) but you do not want to create the CTL file. If that is the case then it is not possible. The CTL file contains the certs that the phone will trust and one of them is the CAPF. It needs to download the ctl file (to get the capf cert) and then to connect to CAPF (using the capf cert from the ctl) in order to get the LSC cert At least that is my understanding Regards, Christos ... View more

I upgraded the IOS version to a most recent one 15.4(3)M4 and the issue went away I hope I can save somebody else's time :) ... View more

After some thourough checking I found it is was due to a backup script that got hung during a backup in the past. For some reason the script never terminated which resulted in openssl process to spike 15955      \_ sh -c sudo tar -cvpPf -  /usr/local/cm/conf/licfiles /usr/local/platform/conf/ipsec.xml /etc/racoon /etc/racoon/skfiles /etc/ipsec.conf /etc/ipsec.secrets /usr/local/platform/conf/drfDevice.xml /usr/local/platform/conf/drfSchedule.xml /usr/local/platform/conf/certMonitorConfig.xml /usr/local/platform/.security/tomcat/trust-certs /usr/local/platform/.security/tomcat/keys/tomcat-trust.passphrase /usr/local/platform/.security/ipsec/trust-certs /usr/local/platform/.security/ipsec/keys/ipsec-trust.passphrase /usr/local/cm/.security/certs /usr/local/cm/.security/CallManager/trust-certs /usr/local/cm/.security/CallManager/certs /usr/local/cm/.security/CallManager/keys /usr/local/cm/.security/TVS/trust-certs /usr/local/cm/.security/TVS/certs /usr/local/cm/.security/TVS/keys /usr/local/cm/.security/CAPF/certs/9d5717f9.0 /usr/local/cm/.security/CAPF/certs/CAPF.description /usr/local/cm/.security/CAPF/certs/CAPF-0a73f18c.pem /usr/local/cm/.security/CAPF/certs/f7a74b2c.0 /usr/local/cm/.security/CAPF/certs/a69d2e04.0 /usr/local/cm/.security/CAPF/certs/CAPF.der /usr/local/cm/.security/CAPF/certs/dcc12642.0 /usr/local/cm/.security/CAPF/certs/Cisco_Root_CA_2048.pem /usr/local/cm/.security/CAPF/certs/a0440f4c.0 /usr/local/cm/.security/CAPF/certs/Cisco_Manufacturing_CA.pem /usr/local/cm/.security/CAPF/certs/CAP-RTP-001.pem /usr/local/cm/.security/CAPF/certs/CAPF.pem /usr/local/cm/.security/CAPF/certs/CAP-RTP-002.pem /usr/local/cm/.security/CAPF/keys/CAPF_priv.pem /usr/local/cm/.security/CAPF/keys/CAPF_priv.der /usr/local/cm/.security/Directory/trust-certs /usr/local/cm/.security/Phone/trust-certs /usr/local/platform/.security/tomcat/keys /usr/local/platform/.security/tomcat/certs /usr/local/platform/.security/ipsec/certs /usr/local/platform/.security/ipsec/keys /usr/local/thirdparty/jakarta-tomcat/conf/server.xml /usr/local/bin/base_scripts/kDump.sh /usr/local/bin/base_scripts/kDumpServer.sh /usr/local/bin/base_scripts/ssh_server.exp /usr/local/bin/base_scripts/ssh_server_details.exp /usr/local/platform/sso/conf/paconfig.conf /usr/local/platform/sso/conf/SSOConfig.xml /usr/local/platform/conf/cluster.conf /tmp/network_ipv6 /tmp/network_ipv6_ifcfg /tmp/sysctl.conf /etc/opt/cisco/ipprefs.conf /etc/opt/cisco/dscp.conf /tmp/servm-restore/platform/conf/services.conf /tmp/servm-restore/platform/conf/activate.conf /usr/local/platform/conf/certEnrollment.conf /usr/local/platform/conf/deployment_mode.conf /usr/local/platform/conf/fips.cnf /usr/local/thirdparty/java/jdk/jre/lib/security/java.security /etc/login.defs /etc/issue /etc/pam.d/system-auth-ac /usr/local/thirdparty/jakarta-tomcat/conf/web.xml /usr/local/platform/conf/cli/cliConfiguration.xml 2>> /common/drf/backup.log | /usr/local/platform/bin/openssl aes-128-cbc -md sha1 -salt -k PH86nj8miZXX76xmLS2o 15957          \_ /usr/local/platform/bin/openssl aes-128-cbc -md sha1 -salt -k ?????*C]x??????1DXm? A show process list detail will tell you since when this script is hung ... View more

Can somebody confirm to me which IOS version has the fix for the above bug ? Regards ... View more

Christian, I have seen it just today on a customer. The openssl process spikes up. After a bit of log checking I see it is because the publisher is busy updating the ITL files for all the ip phones in the cluster, hence openssl is used. Typically this happens when something changes on that list. I am sure I did not change anything but I am not sure if anybody else has changed anything on the cluster. You can check the ciscosyslog file to see if this is the reason for you Oct 30 14:55:24 VCUCM1 local7 3 ccm: 5474304: VCUCM.domain.com: Oct 30 2015 14:55:24.517 UTC :  %UC_-3-DeviceTLInfo: %[DeviceName=SEP5caXXXXXXXX][UNKNOWN_PARAMNAME:IPAddress=XXX.XXX.XXX.XXX][CTL_Signature=Not Installed][CTL_TFTP_Server=N/A][ITL_Signature=F8 7E 1A E9 89 71 E0 02 7F CD B1 FC 06 60 46 26 59 EC A5 FD][ITL_TFTP_Server=VCUCM1.domain.com][AppID=Cisco CallManager][ClusterID=StandAloneCluster][NodeID=VCUCM1]: Trust List Files are updated or installed successfully This is happening for every single phone. No extra cucm has been added and nothing changed on the cluster as far as I know Regards, Christos ... View more

Yes. I get the same error as the bug and we have to reload the gateway for the calls to go through Regards, ... View more

Hi Naveen,   Thanks for the answer. Does this mean that we are not affected by this bug since our DSP is different ?   Regards, ... View more

Marcelo,   Thanks for the reply. that's exactly what I have tested and I did not see any issue. Just wondering if anyone has done it before and if there is any other caveat that I cannot think of   Regards, ... View more