[SR-Users] about kamailio-sbc-teams tutorial

[Daniel-Constantin Mierla]

Hello,

the docs on MS site say:

"""

If Mutual TLS (MTLS) support is enabled for the Teams connection on the
SBC, then you must install the Baltimore CyberTrust Root Certificate in
the SBC Trusted Root Store of the Teams TLS context. (This is because
the Microsoft service certificates use the Baltimore root certificate.)
To download the Baltimore root certificate, see Office 365 Encryption
chains.

"""

  * https://docs.microsoft.com/en-us/microsoftteams/direct-routing-plan

iirc, in a deployment does a while ago, we used the bc2025.* from:

  * https://cacert.omniroot.com/

But you may find other locations on the net.

These cert files are referenced in some documents over the net, when
searching for "microsoft teams direct routing".

Cheers,
Daniel

On 01.02.21 10:23, Juha Heinanen wrote:
> I read kamailio-sbc-teams tutorial
>
> https://skalatan.de/blog/kamailio-sbc-teams
>
> and it does not mention, which CA root certificates need to be included
> tls config ca_list so that Kamalio is able to verify
> sipX.pstnhub.microsoft.com server certificates.
>
> -- Juha
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Funding: https://www.paypal.me/dcmierla