[jira] [Commented] (TS-2710) ATS serves the wrong cert because it matches wildcard certs incorrectly
[ https://issues.apache.org/jira/browse/TS-2710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13973592#comment-13973592 ] ASF subversion and git services commented on TS-2710: - Commit bdcf937732aaa2004640bd4fc6fb3e20cc4ec008 in trafficserver's branch refs/heads/master from [~bcall] [ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=bdcf937 ] Added TS-2650, TS-1125, TS-2548, TS-2710, TS-2704 to CHANGES > ATS serves the wrong cert because it matches wildcard certs incorrectly > --- > > Key: TS-2710 > URL: https://issues.apache.org/jira/browse/TS-2710 > Project: Traffic Server > Issue Type: Bug > Components: SSL >Affects Versions: 5.0.0 >Reporter: manish thakrani >Assignee: Bryan Call > Labels: yahoo > Fix For: 5.0.0 > > Attachments: ts2710.diff > > > If one cert available has a SAN entry for *.a.b.com and another has > a SAN entry for *.b.com, a request for a.b.com will be given > the SAN with the *.a.b.com SAN entry, which will cause the browser > to show the "cert does not match" error. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Commented] (TS-2710) ATS serves the wrong cert because it matches wildcard certs incorrectly
[ https://issues.apache.org/jira/browse/TS-2710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13973263#comment-13973263 ] ASF subversion and git services commented on TS-2710: - Commit 2a2c8bdf1bc93b2324b39a2bf95be6dbd738ae45 in trafficserver's branch refs/heads/master from Manish Thakrani [ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=2a2c8bd ] TS-2710: ATS serves the wrong cert because it matches wildcard certs incorrectly > ATS serves the wrong cert because it matches wildcard certs incorrectly > --- > > Key: TS-2710 > URL: https://issues.apache.org/jira/browse/TS-2710 > Project: Traffic Server > Issue Type: Bug > Components: SSL >Affects Versions: 5.0.0 >Reporter: manish thakrani >Assignee: Bryan Call > Labels: yahoo > Fix For: 5.0.0 > > Attachments: ts2710.diff > > > If one cert available has a SAN entry for *.a.b.com and another has > a SAN entry for *.b.com, a request for a.b.com will be given > the SAN with the *.a.b.com SAN entry, which will cause the browser > to show the "cert does not match" error. -- This message was sent by Atlassian JIRA (v6.2#6252)
