asterisk users - Dec 2021 - PJSIP to Twilio over TLS - wildcard cert problem

On Wednesday 01 December 2021 at 21:39:52, Kingsley Tart wrote:
> Hi,
> 
> I can't get Asterisk to send a SIP call to Twilio over TLS because it
> complains about Twilio's wildcard certificate.
What is the exact "complaint"?
> Is there a way round this?
Maybe, once we know what the error message is :)


Antony.

-- 
I wasn't sure about having a beard at first, but then it grew on me.

                                                   Please reply to the list;
                                                         please *don't* CC
me.

On Wed, 2021-12-01 at 21:49 +0100, Antony Stone wrote:
> On Wednesday 01 December 2021 at 21:39:52, Kingsley Tart wrote:
> 
> > Hi,
> > 
> > I can't get Asterisk to send a SIP call to Twilio over TLS because
> > it
> > complains about Twilio's wildcard certificate.
> 
> What is the exact "complaint"?
> 
> > Is there a way round this?
> 
> Maybe, once we know what the error message is :)
Ha, OK, here it is, or rather, several copies of it as I was trying
various things:

[Nov 29 16:44:08] ERROR[25803] pjproject:           tlsc0x7f1c74246778 RFC 5922
(section 7.2) does not allow TLS wildcard certificates. Advise your SIP
provider, please!
[Nov 29 16:47:41] ERROR[26205] pjproject:           tlsc0x7fb2cc271cd8 RFC 5922
(section 7.2) does not allow TLS wildcard certificates. Advise your SIP
provider, please!
[Nov 29 16:54:06] ERROR[26706] pjproject:           tlsc0x7f506c257798 RFC 5922
(section 7.2) does not allow TLS wildcard certificates. Advise your SIP
provider, please!
[Dec  1 17:11:21] ERROR[27092] pjproject:           tlsc0x7fa20c1e9fd8 RFC 5922
(section 7.2) does not allow TLS wildcard certificates. Advise your SIP
provider, please!
[Dec  1 17:29:24] ERROR[27934] pjproject:           tlsc0x7f7678347ef8 RFC 5922
(section 7.2) does not allow TLS wildcard certificates. Advise your SIP
provider, please!
[Dec  1 17:36:11] ERROR[28475] pjproject:           tlsc0x7fee2c1d02f8 RFC 5922
(section 7.2) does not allow TLS wildcard certificates. Advise your SIP
provider, please!
[Dec  1 17:57:02] ERROR[29731] pjproject:           tlsc0x7fd9e80b1be8 RFC 5922
(section 7.2) does not allow TLS wildcard certificates. Advise your SIP
provider, please!

-- 
Cheers,
Kingsley.