On Tue, 15 Sep 2009, Peter Sylvester wrote:

Issuer: CN=www.anduras.de
      X509v3 Subject Alternative Name:
         email:[email protected]

can you send your certificate, the above extract looks somewhat strange.

To me that looks like a CN that matches and a subjectAltName that doesn't match, which then by the specs should be considered not a match. (Which is a bug fix we made for 7.19.6 so the previous versions did wrong.)

Or am I wrong? That subjectAltName field with an email address looks funny to me.

--

 / daniel.haxx.se

Reply via email to