OpenWebPBX Free Phone 1.0.18 — verified tenant addresses

Debian compatibility correction: use the r2 archive and SHA256SUMS-r2. The earlier non-r2 compatibility archive is withdrawn: its assembly version metadata made the updater restart repeatedly. Revision2 fixes that metadata, repairs original16 or the first patch, and checks sustained worker readiness. The hosted worker is corrected. Calling services and SIP configuration were unaffected. Original APK/AAB/source/feed bytes are unchanged; the old patch/checksums remain attached for history.

OpenWebPBX Free Phone 1.0.18 / code 118 requires every existing saved account to enter its registered https://company.openwebpbx.com tenant address once. For the hosted OpenWeb tenant, use https://openweb.openwebpbx.com. Other account domains are refused.

Install over the existing app; keep the app installed to retain credentials and settings. The app verifies tenant ownership before reusing its saved token. Unconfirmed profiles cannot register calls or notifications. SIP desk phones retain their existing host, authentication ID, password and routing.

The owner selected mandatory Android18 for current and future direct phones on the hosted instance; the minimum is activated after public-download verification. Android may require installation permission/confirmation and tapping Open. Active calls finish before replacement. Google Play submission files are prepared; Google has not approved or published the app.

The complete Debian server remains 1.0.16. Its new dedicated feed contains the exact original signed16 envelope; there is no Debian18 or new Windows installer in this release. Self-hosted instances must prepare their registered tenant address and tenant-bound phone API before using Android18. Stock16 alone does not provide those services. Upgrade/readiness details.

Existing original Debian16 update workers also need the small debian16-feed-compat-r2 package before checking the new Android-only generic feed. The hosted worker has already received it. This signed, exact-file patch changes only the updater DLL/PDB and feed display; it preserves the core version, database, calling services and phone settings. Custom/other-version files refuse. Without it, old Debian workers safely refuse the generic Android feed with an unsupported-platform error.

curl -fLO https://github.com/embire2/openwebpbx/releases/download/v1.0.18/openwebpbx-1.0.18-debian16-feed-compat-r2.tar.gz
tar -xzf openwebpbx-1.0.18-debian16-feed-compat-r2.tar.gz
cd openwebpbx-1.0.18-debian16-feed-compat-r2
sudo python3 split-android-feed.py
sudo python3 split-android-feed.py --apply

Qualification: direct/Play36/40 JVM checks, zero-error lint,28 executed native account/policy/UI/security cases, actual signed116→118 replacement, mandatory address entry and TLS/SRTP calling with independently decoded two-way tones. Tenant/backend/registry and feed isolation tests passed. The AAB retains target36, existing signing identity and26 aligned64-bit libraries with the direct installer excluded. Physical handset/camera/mobile-network,16KB-kernel and Play-track acceptance remain open. Evidence and limits.

APK, Play bundle/submission packet, complete corresponding Android/SDK/dependency source, signed Android feed, exact retained Debian feed, compatibility patch and checksums are attached. Previous release assets retain their original bytes. Wider133/21/72/40 roadmap counts are unchanged.