Hi,
I have implemented some code to check the subjectAltName feilds.
I've committed the change into the upstream mercurial tree and
it should appear in the next release.
The relevant change is:
* Check alt subject if the common name doesn't match
(588:f97aa628a54e)
http://hg.vergenet.net/per
On Thu, Jan 29, 2009 at 11:44:35AM +0100, Erwan David wrote:
> Package: perdition
> Version: 1.17-7etch1
> Severity: normal
>
> When the mail server's certificate uses subjectAltName extensions,
> perdition does not verify against those names, but only against the
> main issuer CN name. This makes
Package: perdition
Version: 1.17-7etch1
Severity: normal
When the mail server's certificate uses subjectAltName extensions,
perdition does not verify against those names, but only against the
main issuer CN name. This makes things cumbersome when the mail server
has several names.
-- System Infor
3 matches
Mail list logo
