[asterisk-bugs] [JIRA] (ASTERISK-25063) add X.509 subject alternative name support to Asterisk TLS support

[Maciej Szmigiero (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-25063?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Maciej Szmigiero updated ASTERISK-25063:
----------------------------------------

    Attachment: asterisk-cert-alt-names.patch

> add X.509 subject alternative name support to Asterisk TLS support
> ------------------------------------------------------------------
>
>                 Key: ASTERISK-25063
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25063
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>            Reporter: Maciej Szmigiero
>            Severity: Minor
>         Attachments: asterisk-cert-alt-names.patch
>
>
> This patch adds X.509 subject alternative name support to Asterisk TLS support.
> This way one X.509 certificate can be used for hosts that can be reached under multiple DNS names or for multiple hosts.
> Currently the code seems to accept multiple subject (CN) fields instead, however according to Mozilla this is not a correct behavior as only the most specific one should be used: https://bugzilla.mozilla.org/show_bug.cgi?id=380656



--
This message was sent by Atlassian JIRA
(v6.2#6252)