SHA1 certificates: A BIG problem

[lonvoice]

Ok, as Yealink will be aware I'm sure, it is no longer possible to get SHA1 certificates through the usual CAs. This is a BIG problem for our installed base out there, as the vast majority of handsets cannot accept SHA256 certificates.

I appreciate that there is a guide on how to disable the trusted certificates manually on the phone, or upgrade the firmware but this does not help us. And this is not autoprovisioning!

Yealink handsets have a Yealink CA loaded into them by default, so it stands to reason that Yealink can generate certificates for RPS servers. I have contacted Yealink UK and they seem to agree that this is possible, but are quoting long delays as the request will need to go via China.

This is an urgent issue for us as we need to renew the certificate on our RPS server, and we have a customer (the first of many, I'm sure) who is trying to restore the config on one of his phones.

We need a fix for this URGENTLY. Yealink have a duty to assist in this situation! Please advise!!