On Tue, 8 Mar 2022 13:00:50 GMT, Sean Mullan <mul...@openjdk.org> wrote:
>> Please review this change to fully support RFC 6125 in the TLS >> implementation. This change forbids wildcard domains in TLS certificates >> unless the wildcard is in the left-most component. Certificates of this >> nature should be rare and are not allowed per the CABForum baseline >> requirements. However there may be a small compatibility risk associated >> with this change, so a CSR has also been filed. > > Sean Mullan has updated the pull request incrementally with one additional > commit since the last revision: > > Merge Wildcard test into TestHostnameCheck. > Rename HostnameMatcher dir to HostnameChecker. Marked as reviewed by rhalade (Reviewer). ------------- PR: https://git.openjdk.java.net/jdk/pull/7697
