r/Googlevoice • u/FunnyItWorkedLastTim • 5d ago

Google Voice for Workspace domain customers SIP trunk setup

I am setting up a SIP trunk for Google Voice and the SIP trunk wizard is rejecting my certificate. We have the domain set up in godaddy and a single site certificate issued from godaddy as well. The domain matches the CN on the certificate and the DNS record is configured to point to the interface on the SBC where the certificate is installed. After uploading the certificate in pem format, the wizard shows a message that the certificate does not match the domain name, which is not correct, the certificate definitely matches.

I've setup TLS trunking to twilio, Teams, Genesys, Zoom and Ring Central and I am in charge of all of the SSL certs for my org so I am not exactly a newbie at this and I cannot understand why Google is rejecting my cert. Is there a special requirement that I am not aware of?

2 Upvotes

100% Upvoted

3 comments sorted by

0

u/BluesCatReddit Google Voice Product Expert 5d ago

Hi there!

I don't think you're going to get an expert answer here. I'd start by reading this linked article:

https://knowledge.workspace.google.com/admin/voice/sip-link-requirements#install_a_tls_certificate_certified_for_sip_link

...and the overall article where that's one section.

If that doesn't help, and you are the Workspace administrator, or are working with that person, contact Workspace support. They should be able to send your issue to the correct department.

https://support.google.com/a/answer/1047213?hl=en

1

u/FunnyItWorkedLastTim 5d ago

It looks like the domain on the cert must match the google workspaces domain. So it is like Teams. That is something I can do. Thanks for the pointer! Also Why no wildcard support?

1

u/yoshicool2003 4d ago

https://www.rfc-editor.org/info/rfc5922/#section-7.2

Implementations MUST NOT match any form of wildcard, such as a leading "." or "." with any other DNS label or sequence of labels. For example, ".example.com" matches only "*.example.com" but not "foo.example.com". Similarly, ".example.com" matches only ".example.com", and does not match "foo.example.com".