On Thu, 2019-10-10 at 10:00 +0200, Laszlo Ersek wrote: > > Subject: C=HU, ST=Pest, L=Budapest, O=Laszlo Ersek Home Office, > > OU=IPv6 cert, CN=fd33:eb1b:9b36::2
Yeah, you're not actually testing the case I'm talking about. You want a GEN_IP in the x509v3 Subject Alternative Name. Compare with... $ openssl s_client -connect vpn-i-ha01.intel.com:443 2>/dev/null | openssl x509 -noout -text | grep -A1 Alternative X509v3 Subject Alternative Name: DNS:vpn-int.intel.com, DNS:scsidcint01-a.intel.com, IP Address:134.191.232.101 $ curl https://134.191.232.101/ -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#48738): https://edk2.groups.io/g/devel/message/48738 Mute This Topic: https://groups.io/mt/34307578/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
smime.p7s
Description: S/MIME cryptographic signature