[Help-gnutls] Re: gnutls_x509_crt_check_hostname()

Daniel Stenberg daniel at haxx.se
Wed Aug 12 10:40:05 CEST 2009


On Wed, 12 Aug 2009, Simon Josefsson wrote:

> Can you post the certificate, or create one that exhibits the same problem?

Yes I can. I have the luxury of actually being able to repeat this problem 
within the curl test suite (test 311). This test was just added and thus made 
me notice this flaw...

The exact cerficates used for this test are found here: 
http://cool.haxx.se/cvs.cgi/curl/tests/certs/

The "Server-localhost0h-sv.pem" is used for the server cert, while 
EdelCurlRoot-ca.crt is the cacert.

-- 

  / daniel.haxx.se





More information about the Gnutls-help mailing list