rewindex

CompaniesTelnyxIncidents

Telnyx: Upcoming TLS Certificate renewals for SIP Trunking Signaling - US and EU regions

MaintenancemaintenanceStatus: maintenance schedulededitedStarted Not resolved1 updatestatus.telnyx.com (opens in new tab)
Summary

Telnyx edited its scheduled TLS certificate renewal notice for inbound SIP proxy servers in the US (sip.telnyx.com) and Europe (sip.telnyx.eu), adding that no disruption to calls or SIP signaling is expected. The edit clarifies expected customer impact; no maintenance start time or duration is shown.

Machine-written from the archived incident (Sol). Check the timeline before relying on it.

Affected components: EuropeUS

Timeline of updates

  1. maintenance scheduledEdited

    Our Telephony Engineers will perform maintenance on our inbound SIP proxy servers in the US (sip.telnyx.com: http://sip.telnyx.com (opens in new tab)) and Europe (sip.telnyx.eu: http://sip.telnyx.eu (opens in new tab)) regions.

    No disruption to calls or SIP signaling is expected during this maintenance.

    During this maintenance, our TLS certificate for each proxy server will be renewed; the four proxy servers will get the update on separate days. These important changes will happen.

    • We'll switch Certificate Authority from Digicert to LetsEncrypt (which means that the entire certificate chain will be changed).
    • The "clientAuth" EKU is being deprecated, which may affect customers who use mTLS (mutual TLS) for SIP signaling.

    This change may be important for any customer who has our old (current) TLS certificate or root-CA certificate (or chain) loaded into an SBC/appliance/phone.

    A notification was sent to customers earlier this year (21st July, subject "Action may be required: TLS certificate changes for Telnyx SIP proxies"); more-detailed information can be found online here.

    Important: the schedule for this maintenance is changed slightly from what was published on our website (which has been updated with this new schedule).

    For any customer seeking to test TLS compatibility before the renewal, note that our Staging SIP proxy server at sipstaging.telnyx.com:5061 can be used to test both inbound and outbound calls (and registrations); it has a certificate from the same certificate authority.

    For any customer not using TLS, the change is expected to be completely seamless.

Changes Rewindex caught on this incident

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Impact, status and times are the vendor’s own, as last archived. View on status.telnyx.com (opens in new tab).

Telnyx profileRecent Telnyx incidentsMarkdownJSON