[asterisk-users] PJSIP to Twilio over TLS - wildcard cert problem

[Dan Jenkins]

It shouldnt stop the call from happening. It will be something else... up
your debugging level and see what else you get

Lots of providers go against this part of the spec but I've run Asterisk 18
with twilio over sip over tls and everything worked, it just spat out the
error line


On Thu, Dec 2, 2021 at 12:21 AM Kingsley Tart <kingsley at dns99.co.uk> wrote:

> On Wed, 2021-12-01 at 22:54 +0100, Antony Stone wrote:
> > So, https://datatracker.ietf.org/doc/html/rfc5922#section-7.2 does seem
> pretty
> > clear about this.  "Implementations MUST NOT match any form of wildcard"
> >
> > Have you contacted the provider who is using a wildcard certificate in
> this way
> > and referred them to the RFC?
>
> No I haven't, but if I did I suspect they would take no notice. Twilio
> is a big provider who do what they do because they can.
>
> And I can see why they do this, because customers can set up their own
> SIP trunks on their system with their unique hostname, so it makes
> sense for them to have a wildcard cert, whether in violation of the RFC
> or not.
>
> --
> Cheers,
> Kingsley.
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> Check out the new Asterisk community forum at:
> https://community.asterisk.org/
>
> New to Asterisk? Start here:
>       https://wiki.asterisk.org/wiki/display/AST/Getting+Started
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20211202/991c3f6d/attachment.html>