[asterisk-bugs] [JIRA] (ASTERISK-25063) add X.509 subject alternative name support to Asterisk TLS support

[Maciej Szmigiero (JIRA)]

Maciej Szmigiero created ASTERISK-25063:
-------------------------------------------

             Summary: add X.509 subject alternative name support to Asterisk TLS support
                 Key: ASTERISK-25063
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25063
             Project: Asterisk
          Issue Type: Improvement
      Security Level: None
            Reporter: Maciej Szmigiero
            Severity: Minor


This patch adds X.509 subject alternative name support to Asterisk TLS support.

This way one X.509 certificate can be used for hosts that can be reached under multiple DNS names or for multiple hosts.

Currently the code seems to accept multiple subject (CN) fields instead, however according to Mozilla this is not a correct behavior as only the most specific one should be used: https://bugzilla.mozilla.org/show_bug.cgi?id=380656



--
This message was sent by Atlassian JIRA
(v6.2#6252)