Need help with an issue not listed here? Please contact Telnyx Support via https://telnyx.com/contact-us. For more information, see our Privacy Policy and Terms of Service linked below.
Need help with an issue not listed here? Please contact Telnyx Support via https://telnyx.com/contact-us. For more information, see our Privacy Policy and Terms of Service linked below.
We've completed the TLS certificate change at sip.telnyx.com.au servers.
For sip.telnyx.ca, we've completed the certificate change at only one of the two proxy servers (sip-anycast2.telnyx.ca, 64.16.250.13).
The primary server (at sip-anycast1.telnyx.ca, 192.76.120.31) has not been changed; we're postponing this until Wednesday 9th September (next week) to give some customers a few more days to review and update TLS configurations.
Please note that the existing TLS certificate for sip.telnyx.ca is due to expire on 12th September, so we'll still complete the renewal before the expiry.
Complete
We've completed the TLS certificate change at sip.telnyx.com.au servers.
For sip.telnyx.ca, we've completed the certificate change at only one of the two proxy servers (sip-anycast2.telnyx.ca, 64.16.250.13).
The primary server (at sip-anycast1.telnyx.ca, 192.76.120.31) has not been changed; we're postponing this until Wednesday 9th September (next week) to give some customers a few more days to review and update TLS configurations.
Please note that the existing TLS certificate for sip.telnyx.ca is due to expire on 12th September, so we'll still complete the renewal before the expiry.
In progress
Maintenance has started
Scheduled
Our Telephony Engineers will perform maintenance on our inbound SIP proxy servers in the Canada (sip.telnyx.ca) and Australia (sip.telnyx.com.au) regions.
During this maintenance, our TLS certificate for each proxy server will be renewed. These important changes will happen.
- We'll switch Certificate Authority from Sectigo to LetsEncrypt.
- The "clientAuth" EKU is being deprecated, which may affect customers who use mTLS (mutual TLS) for SIP signaling.
This change may be important for any customer who has our old (current) TLS certificate or root CA certificate (or chain) loaded into an SBC/appliance/phone.
A notification was sent to customers recently (21st July, subject "Action may be required: TLS certificate changes for Telnyx SIP proxies"); more-detailed information can be found online here.
For any customer seeking to test TLS compatibility before the renewal, note that our Staging SIP proxy server at sipstaging.telnyx.com:5061 can be used to test both inbound and outbound calls (and registrations); it has a certificate from the same certificate authority.
For any customer not using TLS, the change is expected to be completely seamless.