Upcoming changes to Twilio SIP TLS certificates

[fredvollmer]

We recently received the following message from Twilio:

Ahoy!
We've noticed that your account uses SIP over TLS with Twilio, so we're reaching out about an industry-wide change to TLS certificates that may affect your connections if you use Elastic SIP Trunking or Programmable Voice SIP Interface.
Starting May 1, 2026, Twilio's public Certificate Authority will no longer include the Client Authentication Extended Key Usage (EKU) extension in the security certificates they issue. Twilio plans to rotate our existing certificate on or after August 1, 2026, and depending on security needs, we may need to rotate the certificate sooner without notice.

Will this affect LiveKit's SIP integration?

[dennwc]

I think it shouldn't affect us, since the Client Authentication is used for mTLS which we do not enforce currently.