Cisco Meeting Server 3.0 not able to configure Webbridge3 service using Self-Signed Certificate

[NavinkumarSaravanan82912]

Hi,

In Cisco Meeting Server 3.0 Version, I'm not able to configure the Webbridge3 Service in CMS CLI using the Self-Signed Certificate.

Kindly help us to resolve the issue.

Regards,

Navinkumar S

[Nithin Eluvathingal]

Use a CA signed certificate,

an external CA is not required use ur internal CA.

[NavinkumarSaravanan82912]

Hi,

As per your suggestions, we can't do it with a Self-signed certificate right?

Regards,

Navin Kumar S

[Nithin Eluvathingal]

Self singed is recommended for test scenario.

[b.winter]

Hi Navin,

As currently tested with my own CMS, I think you have to add the CN manually when generating the self-signed cert.

e.g. pki selfsigned <tag> CN:cms.test.com

This CN has to be in the API command, when you add the webbridge3:

POST to https://<ip-or-fqdn>:<port>/api/v1/webbridges
Parameter: url --> c2w://<Webbrige 3 CN>:<Port>

The IP / FQDN of the above url has to be in the certificate (which you assign via CLI command "webbridge3 c2w certs <key> <cert-chain-file>")

But even if you have the CN in the cert, the connection won't establish with the following error:

C2W Peer 7FE8E88A2200 failed TLS handshake with error: self signed certificate

I hope, that helps.

[b.winter]

Hi Navin,

As currently tested with my own CMS, I think you have to add the CN manually when generating the self-signed cert.

e.g. pki selfsigned <tag> CN:cms.test.com

This CN has to be in the API command, when you add the webbridge3:

POST to https://<ip-or-fqdn>:<port>/api/v1/webbridges
Parameter: url --> c2w://<Webbrige 3 CN>:<Port>

The IP / FQDN of the above url has to be in the certificate (which you assign via CLI command "webbridge3 c2w certs <key> <cert-chain-file>")

But even if you have the CN in the cert, the connection won't establish with the following error:

C2W Peer 7FE8E88A2200 failed TLS handshake with error: self signed certificate

I hope, that helps.

[b.winter]

Hey,

what's the issue you are having?

You get any error messages? Can't you enter any commands? ...

Best regards

[Muhammad Samiuddin]

Hi Navin

Did you get to resolve this? Could you please share the config as I am using self signed certs as well? Thanks