How can we help you today?
Start a new topic

SHA-2 support

 Hi


I can not find any information if SHA-2 certificates are supported by snom phones.

One of our clients has difficulties with it. They have 8.8.3.27 UC firmware version on D715 phone.

Needless to say that all newer CAs are SHA-2 certificates.

So, my question is whether SHA-2 is supported or not? If not then when do you plan to add it?


Jan 27 14:32:34 [ERROR ] TLS: Unsupported signature alg 1.2.840.113549.1.1.11 (unknownObjectIdentifier) in cert CN=sip.....ee,O=Some Company,L=Tallinn,ST=Harjumaa,C=EE

Jan 27 14:32:34 [ERROR ] TLS: Refusing connection due to Invalid or unknown Certificate

Jan 27 14:32:34 [FATAL ] PHN: tls.cpp (1685) str tls::get_digest(const str&, const str&, const str&): SNOM_ASSERT(mac_key.is_set()) failed

Jan 27 14:32:34 [FATAL ] PHN: aes.cpp (607) str Aes::Encrypt(const str&): SNOM_ASSERT(iv.is_set()) failed

Jan 27 14:32:34 [FATAL ] PHN: aes.cpp (620) str Aes::Encrypt(const str&): SNOM_ASSERT(iv.length() == blocksize) failed

Jan 27 14:32:34 [FATAL ] PHN: str.cpp (1393) str str::l_xor(const str&) const: SNOM_ASSERT(alen == blen) failed

Jan 27 14:32:34 [ERROR ] PHN: TPL: Socket Error: 2879/34/connected, Tls error, closing


Best regards
Madis Malv

1 Comment

SHA-2 support came in firmware 8.7.5.9 to all devices except for the Snom 300, 320, 360 and 370. I'm not sure about the UC firmware, but versions released after 8.7.5.9 came out in mid-2014 likely also have SHA-2 support.

Login or Signup to post a comment