Michael Wood schrieb: > 2009/9/15 Sven Anders <[email protected]>: > >> Yes and No. An DNS or IP entry should match, but I can have other >> entries (like email, RID, URI, otherName,...) too. >> These should not considered when trying to match. >> > > OK, but is it OK to have Subject: C=DE,...C=Germany? Why do you have > the country in there twice? And why no CN=hostname? > > Ok, this is wrong. But it's not the cause of the problem.
> Are you saying that the hostname check should not be done because > there isn't one in the certificate? > > Yes, it should then checked against the CN. (See Peter Sylvester's first answer...) Regards Sven -- Sven Anders <[email protected]> () Ascii Ribbon Campaign /\ Support plain text e-mail ANDURAS service solutions AG Innstraße 71 - 94036 Passau - Germany Web: www.anduras.de - Tel: +49 (0)851-4 90 50-0 - Fax: +49 (0)851-4 90 50-55 Rechtsform: Aktiengesellschaft - Sitz: Passau - Amtsgericht Passau HRB 6032 Mitglieder des Vorstands: Sven Anders, Marcus Junker Vorsitzender des Aufsichtsrats: Mark Peters
<<attachment: anders.vcf>>
signature.asc
Description: OpenPGP digital signature
