On Thu, Dec 2, 2021 at 10:18 AM James Cloos <cl...@jhcloos.com> wrote:

> >>>>> "KT" == Kingsley Tart <kings...@dns99.co.uk> writes:
>
> KT> I can't get Asterisk to send a SIP call to Twilio over TLS
> KT> because it complains about Twilio's wildcard certificate.
>
> the sip rfc claims that wildcard certs should be invalid for sip.
>
> digium insisted on following that advise as set in stone, and so
> asterisk refuses such certs.  i doubt that stance is different
> under sangoma.
>
> the only workaround is to remind twil of the rfc and get them to
> replace the wildcard with an rfc-copliant cert.  at least for the
> sip ports.
>

To be specific, this is in PJSIP land. There was no insisting or anything
and it wasn't a decision we originally made. It's the way that Teluu
implemented the TLS transport in PJSIP and since we use PJSIP then it
applies to us. If someone contributed a change to Asterisk to make it
configurable in some way, then we'd certainly review it. At this point
though noone has done such a thing.

-- 
Joshua C. Colp
Asterisk Technical Lead
Sangoma Technologies
Check us out at www.sangoma.com and www.asterisk.org
-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
      https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to