SBC certificate is not issued correctly

Pragash Venugopal 0 Reputation points
2023-07-26T05:56:36.24+00:00

H All,

 

I am trying to establish a SIP TLS connection between MS Teams and Audiocodes hosted in GCP.

 

but I am getting below errors in Audiocodes and the SIP TLS connection is not successful.

REASON: Q.850;cause=63;text="f9f5ac89-d865-4b18-9f84-poiuewrasdf;SBC certificate is not issued correctly. Provided trunk FQDN '34.XX.93.132' is not included in certificate's CN or SAN list. Certificate allows following FQDNs only: sbc.regularadmin.online, regularadmin.o" CONTENT-LENGTH: 0

 

But my IP address is added on the signed certificate 

X509v3 Subject Alternative Name:

DNS:sbc.regularadmin.online, IP Address:34.XX.93.132, DNS:regularadmin.online

Anyone could help me on this case?

 

Kind regards

Pragash

Microsoft Teams | Microsoft Teams for business | Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Anonymous
    2023-07-26T08:35:57.97+00:00

    Hi @Pragash Venugopal

    Based on the error message you provided, it seems that the SBC certificate is not issued correctly. The provided trunk FQDN '34.XX.93.132' is not included in the certificate's CN or SAN list. The certificate only allows the following FQDNs: sbc .regularadmin.online, regularadmin.online.

    AudioCodes has a configuration note on connecting AudioCodes’ SBC to Microsoft Teams Direct Routing . It provides detailed instructions on how to configure the connection between AudioCodes’ SBC and Teams Direct Routing with a generic SIP Trunk.

    You may also want to check Microsoft's documentation on troubleshooting SIP options and TLS certificate issues 2. It explains that the SIP proxy checks the TLS connection request and if the request is not valid, the TLS connection is closed and the SIP proxy does not receive SIP options from the SBC.

    I hope this information helps you resolve the issue.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


    0 comments No comments

  2. Pragash Venugopal 0 Reputation points
    2023-07-27T06:45:06.2866667+00:00

    Hi LiweiTian

    thank you for your reply.
    SBC Cert is CA signed by Sectigo (Approved by Microsoft)

    My RootCA

    • Baltimore CyberTrust root
    • Sectigo RSA Domain Validation S
    • DigiCert Baltimore CA-1 G2 Below info from my cert

    X509v3 Subject Alternative Name:

    DNS:sbc.regularadmin.online, IP Address:34.XX.93.132, DNS:regularadmin.online

    Subject: CN=sbc.regularadmin.online

    I meet all the necessary requirement, not sure why it is not working.

    Kind regards

    Pragash


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.