[ 
https://issues.apache.org/jira/browse/TS-2031?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13884353#comment-13884353
 ] 

ASF subversion and git services commented on TS-2031:
-----------------------------------------------------

Commit 063b320a72bafe837ff018a04912b6632984084d in branch refs/heads/master 
from [~ffcai]
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=063b320 ]

TS-2031: Prevent duplicate SSL SNI name registration

If you have two certs that has the same CNs, the last one wins in
the SNI negotiation. We not detect this case, issue a warning and
preserve the existing registration.


> Two SSL certs with overlapping CNs stomps over each other without warnings
> --------------------------------------------------------------------------
>
>                 Key: TS-2031
>                 URL: https://issues.apache.org/jira/browse/TS-2031
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: SSL
>            Reporter: Leif Hedstrom
>            Assignee: James Peach
>            Priority: Minor
>             Fix For: 5.1.0
>
>         Attachments: TS-2031.diff
>
>
> If you have two certs that has the same CNs, the last one wins in the SNI 
> negotiation. This even takes precedence over "assigned" IPs (SNI trumps IP). 
> We should at least warn on this.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to