« Back to IP Phone Services Questions

service won't work on https, ok on http

Combination View Flat View Tree View
Threads [ Previous | Next ]
I created a 'time clock' app that works fine on an unsecured site (using port 80). When I moved it to a secure site (port 443), it would no longer work.
I changed all the URLs within the asp pages to https; this did nothing.
 
We are using CUCM System version: 7.1.5.32900-2 - will services run on https with this version?

I believe HTTPS support was added (from a CUCM side) in 8.0 and higher (in CUCM there are separate HTTP and HTTPS URLs in Enterprise Parameters and IP Phone Service definitions if it is supported.) This is also dependent on IP Phone Firmware. I have implemented several HTTPS phone services in 8.5 and there are some caveats: 1) the web server public certificate (not private) needs to be added to CUCM servers on the OS side as a phone-CTL-trust. If using not using security between CUCM and phones (e.g. you have never obtained/used the security tokens and have never run the CTL wizard) this is sufficient; otherwise you need to (re)run the CTL wizard. 2) As of 9.1(1) there was a bug in using port 443 (explicitly or just as https) and just using another port works (see bug IDs CSCtj62147). Also on 8.5 there is a bug (CSCtr78976) that resets Enterprise Parameter Secure URLs upon restart.

Thank you. Your answer helps more than you know. Very much appreciated

Sent from my iPod

On Feb 18, 2012, at 8:53 PM, "Cisco Developer Community Forums" <cdicuser@developer.cisco.com> wrote:

> Jeffrey Ness has created a new message in the forum "IP Phone Services Questions":
>
> --------------------------------------------------------------
> I believe HTTPS support was added (from a CUCM side) in 8.0 and higher (in CUCM there are separate HTTP and HTTPS URLs in Enterprise Parameters and IP Phone Service definitions if it is supported.) This is also dependent on IP Phone Firmware. I have implemented several HTTPS phone services in 8.5 and there are some caveats: 1) the web server public certificate (not private) needs to be added to CUCM servers on the OS side as a phone-CTL-trust. If using not using security between CUCM and phones (e.g. you have never obtained/used the security tokens and have never run the CTL wizard) this is sufficient; otherwise you need to (re)run the CTL wizard. 2) As of 9.1(1) there was a bug in using port 443 (explicitly or just as https) and just using another port works (see bug IDs CSCtj62147). Also on 8.5 there is a bug (CSCtr78976) that resets Enterprise Parameter Secure URLs upon restart.
> --
> To respond to this post, please click the following link:
>
> <http://developer.cisco.com/web/ipps/forums/-/message_boards/view_message/5176695>
>
> or simply reply to this email.