Objective
How do I know if my application is impacted by the DigiCert update of the default public issuance of SSL/TLS certificates (DigiCert G2 Announcement).
Context
Effective January 2025, Vonage Video API will begin renewing certificates using DigiCert’s G2 root certificate.
Applies To
- Video API
Expected Impact
Customers running supported versions of the Vonage Video SDKs will not be impacted. For the JS SDK, the underlying browser version is the guiding consideration. You can find supported versions and their SLA’s here: on Tokbox and on Unified.
The following Video API Native SDK versions will not be impacted:
- Android SDK version 2.16 (2019) and above
- iOS SDK version 2.11.3 (2017) and above
- Windows SDK, all versions
- Linux SDK, all versions
- Mac SDK, all versions
- React Native SDK, all versions
The following browser versions will not be impacted:
- Chrome version 55 (2016) and above
- Firefox version 53 (2017) and above
- Safari version 11 (2017) and above
The following platform versions will not be impacted:
- Android 8 (2017) and above
- iOS 12 (2018) or above
- Windows 10 (2015) or above
- macOS 10.13 (2017) or above
The Server SDKs are not a factor in this change, and do not require updating.
Types of users of the Video API who may experience impact.
We expect that customers using older platforms or advanced configurations may be more likely to fail to trust the new G2 certificate, and experience service disruptions.
Our testing shows that the customers using the following configurations may be impacted:
-
Unsupported and End-of-Life Native Client SDKs may be impacted:
- iOS SDK version 2.11.2 and earlier
- Android SDK version 2.15.3 and earlier
-
Sessions with Participants using older unsupported browsers may be impacted:
- Chrome version 54 and earlier
- Firefox version 52 and earlier
- Safari version 10 and earlier
-
SIP connections where the SIP endpoint needs to accept Vonage SIP TLS certificates may be impacted:
- SIP Endpoints that require SIP TLS must be ready to accept using the new DigiCert G2 certificates.
- SIP Endpoints may include SIP Trunk, Session Border Controller (SBC), SIP Proxy, etc.
- It is important that customers restricting the acceptance of calls on the basis of specific domain certificates, such as the Vonage SIP Video Domain certificate, make sure they can operate with DigiCert’s G2 versions.
-
Very restrictive Backend Servers receiving callbacks from Video API may be impacted:
- These backend servers need to be updated to accept DigiCert G2 certifications.
-
Very old mobile platform versions may be impacted:
- Android 7 or below (2016)
- iOS 12 or below (2018)
- Windows 8.1 (2014) or below
- macOS 10.12 (2016) or below