Hi,

According to the manual on the option CertificateFile:
``Directly matched peer certificates are always trusted, regardless of 
validity.''

However, I still get the error ``certificate owner does not match 
hostname''. The error is right in that the domain of the certificate does 
not match the Host domain in the configuration. It is wrong in that 
according to the manual, this check should have passed.

The attached patch adds an option CertificateDomain, which is used to 
match against the certificate. Given the manual, this might not be 
intended.

What is the intended behaviour, and what would be the preferred way to 
solve it?

Greetings/Groetjes

Mark Pustjens

--
There have, in the course of decadent history, been many large wigs, often
with build-in gewgaws to stop people having to look at boring hair all the
time. There had been ones big enough to contain pet mice or clockwork
ornaments. Mme Cupidor, mistress of Mad King Soup II, had one with a bird
cage in it, but on special state occasions wore one containing a perpetual
calendar, a floral clock and a take-away linguini shop.
   (Lords and Ladies)

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Reply via email to