[issue28196] ssl.match_hostname() should check for SRV-ID and URI-ID

Christian Heimes added the comment: Let OpenSSL handle this in the future. -- resolution: -> wont fix stage: test needed -> resolved status: open -> closed ___ Python tracker

[issue28196] ssl.match_hostname() should check for SRV-ID and URI-ID

Changes by Christian Heimes : -- dependencies: +Support RFC4985 SRVName in SAN name ___ Python tracker ___

[issue28196] ssl.match_hostname() should check for SRV-ID and URI-ID

New submission from Christian Heimes: The ssl.match_hostname() function does not conform to RFC 6125 because it can fall back to Subject CN when a cert has no dNSName SAN (subject alternative name) but a SRVName otherName SAN or URI SAN. --- https://tools.ietf.org/search/rfc6125#section-6.4.4