[asterisk-users] PJSIP to Twilio over TLS - wildcard cert problem

Kingsley Tart
Wed, 01 Dec 2021 20:39:52 -0000

Hi,

I can't get Asterisk to send a SIP call to Twilio over TLS because it
complains about Twilio's wildcard certificate.

This is with Asterisk 18.8.0 and PJSIP 2.10

pjsip show transport shows me this:

 allow_reload               : false
 async_operations           : 1
 bind                       : 0.0.0.0:5061
 ca_list_file               :
 ca_list_path               :
 cert_file                  : /admin/local/asterisk-keys/asterisk.crt
 cipher                     : ADH-AES256-SHA, ADH-AES128-SHA, ECDHE-
RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-
SHA384, ECDHE-RSA-AES128-SHA256, AES256-GCM-SHA384, AES128-GCM-SHA256,
AES256-SHA256, AES128-SHA256, AES256-SHA, AES128-SHA
 cos                        : 0
 domain                     :
 external_media_address     :
 external_signaling_address :
 external_signaling_port    : 0
 local_net                  :
 method                     : sslv23
 password                   :
 priv_key_file              : /admin/local/asterisk-keys/asterisk.key
 protocol                   : tls
 require_client_cert        : No
 symmetric_transport        : false
 tos                        : 0
 verify_client              : No
 verify_server              : No
 websocket_write_timeout    : 100

(also tried with method set to tlsv1).

Googling told me to set verify_server=no but as you can see this is
already set.

Is there a way round this?

--
Cheers,
Kingsley.