[gnutls-devel] GnuTLS | trailing dot needs to be stripped for certificate matching (#521)

[Björn Jacke]

New Issue was created.

Issue 521: https://gitlab.com/gnutls/gnutls/issues/521
Author:    Björn Jacke
Assignee:  

A perfectly correct DNS FQDN ends with a dot but this will break certificate name matching with of gnutls-clu because names in certs omit the trainling for for FQDNs:

# gnutls-cli --starttls-proto=smtp alt1.aspmx.l.google.com.:25
...
- Status: The certificate is NOT trusted. The name in the certificate does not match the expected. 
*** PKI verification of server certificate failed...
*** Fatal error: Error in the certificate.

while the same withalt1.aspmx.l.google.com:25 works. gnutls-cli shoult strip the dot for the name matching.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/521
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20180718/cca860c8/attachment.html>