Source note · SIP TLS handshake failures on trunks
Microsoft reports that Google's Chrome Root Program Policy v1.6 (February 2025) deprecates the Client Authentication EKU in TLS server certificates, and that from June 2026 certificates must include only the Server Authentication EKU to stay trusted by major browsers.
disputed · Checked 2026-09-25
- Vendor
- Product
- Chrome Root Program
- Subsystem
- certificate EKU policy
- Deployment
- any
- Region
- not restricted
- Release range
- as reported 2025-12-12
- Status
- disputed
- Checked
- 2026-09-25
Sources
- What's New Direct Routing — Microsoft · tier 2 current vendor documentation · Update on upcoming certificate changes (December 12, 2025) > Background
Cite this note
APA
WarmTransfer. (2026, September 25). SIP TLS handshake failures on trunks: source note sip-tls-handshake-failures-ms-chrome-eku-date. WarmTransfer. https://warmtransfer.net/knowledge/claims/sip-tls-handshake-failures-ms-chrome-eku-date
BibTeX
@misc{warmtransfer-claim-sip-tls-handshake-failures-ms-chrome-eku-date,
title = {SIP TLS handshake failures on trunks: source note sip-tls-handshake-failures-ms-chrome-eku-date},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/sip-tls-handshake-failures-ms-chrome-eku-date},
note = {Source note sip-tls-handshake-failures-ms-chrome-eku-date, checked 2026-09-25}
}