> On May 31, 2016, at 9:54 AM, Blumenthal, Uri - 0553 - MITLL <u...@ll.mit.edu> > wrote: > >> As one example, mozilla::pkix treats the CN as a dNSName/iPAddress iif there >> is no subjectAltName extension and iif the CN is a valid dNSNa/iPAddress >> syntactically. > > That approach seems wrong.
Could you explain your point in more detail than putting "wrong" in bold text? Though ad-hoc, it seems about the best one can do, absent additional information. -- Viktor. -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev