> On May 31, 2016, at 9:54 AM, Blumenthal, Uri - 0553 - MITLL <[email protected]>
> wrote:
>
>> As one example, mozilla::pkix treats the CN as a dNSName/iPAddress iif there
>> is no subjectAltName extension and iif the CN is a valid dNSNa/iPAddress
>> syntactically.
>
> That approach seems wrong.
Could you explain your point in more detail than putting "wrong"
in bold text? Though ad-hoc, it seems about the best one can do,
absent additional information.
--
Viktor.
--
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
