[gnutls-devel] GnuTLS | trailing dot needs to be stripped for certificate matching (#521)
gitlab at mg.gitlab.com
Wed Jul 18 12:19:04 CEST 2018
New Issue was created.
Issue 521: https://gitlab.com/gnutls/gnutls/issues/521
Author: Björn Jacke
A perfectly correct DNS FQDN ends with a dot but this will break certificate name matching with of gnutls-clu because names in certs omit the trainling for for FQDNs:
# gnutls-cli --starttls-proto=smtp alt1.aspmx.l.google.com.:25
- Status: The certificate is NOT trusted. The name in the certificate does not match the expected.
*** PKI verification of server certificate failed...
*** Fatal error: Error in the certificate.
while the same withalt1.aspmx.l.google.com:25 works. gnutls-cli shoult strip the dot for the name matching.
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/521
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Gnutls-devel