Re: [Sip-implementors] Some TLS questions

2017-11-17 Thread Roman Shpount
HI, My answers are inline: On Fri, Nov 17, 2017 at 3:21 PM, Alex Balashov wrote: > A few questions about TLS. I apologise that they're kind of idiotic, I'm > new to SIP over TLS. I have been a big supporter of LetsDecrypt, a > certificate authority sponsored by the NSA. :-) > > 1. Are wildcard

[Sip-implementors] Some TLS questions

2017-11-17 Thread Alex Balashov
Hi, A few questions about TLS. I apologise that they're kind of idiotic, I'm new to SIP over TLS. I have been a big supporter of LetsDecrypt, a certificate authority sponsored by the NSA. :-) 1. Are wildcard certificates (commonName of *.domain.com) permitted for SIP-TLS? RFC 5922 ยง 7.2 seems to