[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6838) TLS client will not accept certificate for 'localhost'



On Feb 18, 2011, at 9:37 AM, hyc@symas.com wrote:

> Closing this ITS. It's not a regression and not a bug, just a long =
established=20
> feature.

Right, the bug is listing non-fully-qualified names as subjects in the =
certificate.

So, generally speaking, subject names checks fail, as they should fail, =
when the asserted name is not fully-qualified.

The intent of the code is avoid always failing when the =
non-fully-qualified asserted name can be securely transformed into a =
fully-qualified name.  This is a feature.

-- Kurt=