]> git.ipfire.org Git - thirdparty/squid.git/commit
Bug fix: setCommonName and alternative names
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 23 Feb 2012 19:51:38 +0000 (21:51 +0200)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 23 Feb 2012 19:51:38 +0000 (21:51 +0200)
commit3b7ed55fc04de3c61046c2b308b0621deb7fd627
treea309bcf7aec8f6f71f841050d7650cd1ba984fcd
parent59a49556276875029ec5752103f928774660ccf9
Bug fix: setCommonName and alternative names

setCommonName sets CN, but that is not enough when the fake certificate containsalternative names (which Squid mimics): The browser does not accept the
resulting fake certificate because it does not contains at least one alternativename that matches the domain name.

This patch stop mimicking of "Certificate Subject Alt Name" extensions when the
setCommonName adaptation algorithm used
src/ssl/gadgets.cc