From 57e9b3c6375d4044ba20b097170f1a40a4c50146 Mon Sep 17 00:00:00 2001
From: Dan <dan@acceleratenetworks.com>
Date: Mon, 17 Aug 2020 11:34:11 -0700
Subject: [PATCH] Add TLS settings to enable working with LetsEncrypt wildcard
 (#5398)

---
 resources/templates/provision/polycom/4.x/{$mac}.cfg | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/resources/templates/provision/polycom/4.x/{$mac}.cfg b/resources/templates/provision/polycom/4.x/{$mac}.cfg
index dd4ae700cc..aa328ea3ff 100644
--- a/resources/templates/provision/polycom/4.x/{$mac}.cfg
+++ b/resources/templates/provision/polycom/4.x/{$mac}.cfg
@@ -61,10 +61,12 @@
 		sec.srtp.enable="{$polycom_srtp_enable}"
 		sec.srtp.offer="{$polycom_srtp_offer}"
 		sec.srtp.require="{$polycom_srtp_require}"
+		sec.TLS.SIP.strictCertCommonNameValidation="0"
 	/>
 	<DEVICE_SETTINGS
 		device.set="1"
 		device.sntp.serverName="{$ntp_server_primary}"
+		{if isset($polycom_gmt_offset)}device.sntp.gmtOffset.set="1"{/if}
 		device.sntp.gmtOffset="{$polycom_gmt_offset}"
 		device.prov.upgradeServer.set="1"
 		device.prov.upgradeServer="{$polycom_firmware_url}"
@@ -92,6 +94,11 @@
 		{else}
 		device.prov.serverName="{$domain_name}"
 		{/if}
+		{if isset($polycom_gmt_offset)}
+		device.sntp.gmtOffset.set="1"
+		device.sec.TLS.customCaCert1.set="1"
+		device.sec.TLS.customCaCert1="{$polycom_root_cert}"
+		{/if}
 	/>
 	<SNTP
 		tcpIpApp.sntp.resyncPeriod="86400"