I think CSR 14 is supposed to deal with simplicity of certificate operations
Get Outlook for iOS<https://aka.ms/o0ukef> Matthew Loraditch Sr. Network Engineer p: 443.541.1518 w: www.heliontechnologies.com | e: [email protected] ________________________________ From: cisco-voip <[email protected]> on behalf of Hunter Fuller <[email protected]> Sent: Wednesday, March 4, 2020 1:55:50 PM To: Lelio Fulgenzi <[email protected]> Cc: Norton, Mike <[email protected]>; voyp list, cisco-voip ([email protected]) <[email protected]> Subject: Re: [cisco-voip] [External] Re: certificate renewals - 1 year only - due to Apple changes [EXTERNAL] Is it possible to install a cert via API? If that works, we can do this from an admin machine, whether or not the Cisco service (for instance CUCM) supports it. -- Hunter Fuller Router Jockey VBH Annex B-5 +1 256 824 5331 Office of Information Technology The University of Alabama in Huntsville Network Engineering On Wed, Mar 4, 2020 at 12:46 PM Lelio Fulgenzi <[email protected]<mailto:[email protected]>> wrote: Unfortunately, I can’t justify a telephone system upgrade for the sake of auto-renewal of certificates. ☹ CUCM v11.5 has yet to be announced EOL. (Please Please Please don’t happen tomorrow). This means we’ve got at least 5 more years to plan accordingly. Will they issue an SU to support let’s encrypt? Let’s hope so! From: Norton, Mike <[email protected]<mailto:[email protected]>> Sent: Wednesday, March 4, 2020 1:38 PM To: Lelio Fulgenzi <[email protected]<mailto:[email protected]>>; voyp list, cisco-voip ([email protected]<mailto:[email protected]>) <[email protected]<mailto:[email protected]>> Subject: RE: certificate renewals - 1 year only - due to Apple changes If two years from now, a product that needs public certificates still doesn’t support automated renewals, then it’s a terrible product you should have migrated away from two years earlier. The writing has been on the wall for a long time. But even for developers who’ve had their heads in sand, two years is still plenty of time for them to get a clue. ;-) -mn From: cisco-voip <[email protected]<mailto:[email protected]>> On Behalf Of Lelio Fulgenzi Sent: March 4, 2020 10:52 AM To: voyp list, cisco-voip ([email protected]<mailto:[email protected]>) <[email protected]<mailto:[email protected]>> Subject: [cisco-voip] certificate renewals - 1 year only - due to Apple changes So, we’ve gotten word that Apple is thinking of “accepting/trusting” only certs that are 13 months old or less. https://www.theregister.co.uk/2020/02/20/apple_shorter_cert_lifetime/ This is a bit of a drag on Jabber deployments due to so many certs being needed. >From what I’ve seen, only Expressway supports auto-renew like let’s encrypt. >From the article, it seems: "Certificates issued prior to September 1 will have the same acceptable duration as certificates do today, which is 825 days. No action is required for these certificates." I’m guessing it if says Safari, it’s any cert used by an apple device, since the safari engine is used throughout, right? We’re planning on renewing soon, so we should be good to go with 2 years. But the future? What are others planning on doing? _______________________________________________ cisco-voip mailing list [email protected]<mailto:[email protected]> https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
