Thread (14 messages) flat view 14 messages, 6 authors, 2021-10-14

Re: [BUG] credential wildcard does not match hostnames containing an underscore

From: Aaron Schrab <hidden>
Date: 2021-10-12 22:32:57

Possibly related (same subject, not in this thread)

At 21:57 +0000 12 Oct 2021, "brian m. carlson" [off-list ref] wrote:
I also just checked, and RFC 5280 specifies the rules for RFC 1123
regarding host names in certificates.  So even if we did accept this, no
publicly trusted CA could issue a certificate for such a domain, because
to do so would be misissuance.  So this at best could help people who
are either using plain HTTP or an internal CA using broken tools,
neither of which I think argue in favor of supporting this.
Or people using a wildcard certificate.

Attachments

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help