Re: [SR-Users] Using wildcard certificates for Kamailio server

Hello, Is it permitted to use the wildcard TLS certificates for Kamailio server? In reality, it works (tested with v.5.4) but the RFC-5922 disables the wildcard certificates usage: "Implementations MUST match the values in their entirety: Implementations MUST NOT match suffixes. For example, "foo.example.com <http://foo.example.com>" does not match "example.com <http://example.com>". Implementations MUST NOT match any form of wildcard, such as a leading "." or "*." with any other DNS label or sequence of labels. For example, "*.example.com <http://example.com>" matches only "*.example.com <http://example.com>" but not "foo.example.com <http://foo.example.com>". Similarly, ".example.com <http://example.com>" matches only ".example.com <http://example.com>", and does not match "foo.example.com <http://foo.example.com>". (Ref.:https://tools.ietf.org/html/rfc5922#section-7.2) To be honest, I don't understand why this restriction is good for... Is somebody aware of a newer RFC that removes this limitation? Best regards, Leonid Fainshtein _______________________________________________ Kamailio (SER) - Users Mailing List sr-users(a)lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users