<div dir="ltr">As far as I'm aware Josh, it doesnt stop a call from happening - I've had the same "errors" pop up when using Twilio and Simwood but calls continue just fine.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Dec 2, 2021 at 2:30 PM Joshua C. Colp <<a href="mailto:jcolp@sangoma.com">jcolp@sangoma.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr">On Thu, Dec 2, 2021 at 10:18 AM James Cloos <<a href="mailto:cloos@jhcloos.com" target="_blank">cloos@jhcloos.com</a>> wrote:<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">>>>>> "KT" == Kingsley Tart <<a href="mailto:kingsley@dns99.co.uk" target="_blank">kingsley@dns99.co.uk</a>> writes:<br>
<br>
KT> I can't get Asterisk to send a SIP call to Twilio over TLS<br>
KT> because it complains about Twilio's wildcard certificate.<br>
<br>
the sip rfc claims that wildcard certs should be invalid for sip.<br>
<br>
digium insisted on following that advise as set in stone, and so<br>
asterisk refuses such certs. i doubt that stance is different<br>
under sangoma.<br>
<br>
the only workaround is to remind twil of the rfc and get them to<br>
replace the wildcard with an rfc-copliant cert. at least for the<br>
sip ports.<br></blockquote><div><br></div><div>To be specific, this is in PJSIP land. There was no insisting or anything and it wasn't a decision we originally made. It's the way that Teluu implemented the TLS transport in PJSIP and since we use PJSIP then it applies to us. If someone contributed a change to Asterisk to make it configurable in some way, then we'd certainly review it. At this point though noone has done such a thing.</div></div><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-family:tahoma,sans-serif"><font color="#073763">Joshua C. Colp</font></div><div style="font-family:tahoma,sans-serif"><font color="#073763">Asterisk Technical Lead</font></div><div style="font-family:tahoma,sans-serif"><font color="#073763">Sangoma Technologies</font></div><div style="font-family:tahoma,sans-serif"><font color="#073763">Check us out at <a href="http://www.sangoma.com" target="_blank">www.sangoma.com</a> and <a href="http://www.asterisk.org" target="_blank">www.asterisk.org</a></font><br></div></div></div></div></div></div></div></div></div></div></div>
-- <br>
_____________________________________________________________________<br>
-- Bandwidth and Colocation Provided by <a href="http://www.api-digital.com" rel="noreferrer" target="_blank">http://www.api-digital.com</a> --<br>
<br>
Check out the new Asterisk community forum at: <a href="https://community.asterisk.org/" rel="noreferrer" target="_blank">https://community.asterisk.org/</a><br>
<br>
New to Asterisk? Start here:<br>
<a href="https://wiki.asterisk.org/wiki/display/AST/Getting+Started" rel="noreferrer" target="_blank">https://wiki.asterisk.org/wiki/display/AST/Getting+Started</a><br>
<br>
asterisk-users mailing list<br>
To UNSUBSCRIBE or update options visit:<br>
<a href="http://lists.digium.com/mailman/listinfo/asterisk-users" rel="noreferrer" target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a></blockquote></div>