[asterisk-bugs] [JIRA] (ASTERISK-25063) [patch]add X.509 subject alternative name support to Asterisk TLS support

[Rusty Newton (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-25063?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=226153#comment-226153 ] 

Rusty Newton commented on ASTERISK-25063:
-----------------------------------------

Thanks for the contribution! If you'd like your contribution to be included faster, you should submit your patch for code review by the Asterisk Developer Community. To do so, please follow the Code Review [1] instructions on the wiki. Be sure to:
* Verify that your patch conforms to the Coding Guidelines [2]
* Review the Code Review Checklist [3] for common items reviewers will look for
* If necessary, provide tests for the Asterisk Test Suite that verify the correctness of your patch [4]

When ready, submit your patch and any tests to Gerrit [5] for code review.

Thanks!

[1] https://wiki.asterisk.org/wiki/display/AST/Code+Review
[2] https://wiki.asterisk.org/wiki/display/AST/Coding+Guidelines
[3] https://wiki.asterisk.org/wiki/display/AST/Code+Review+Checklist
[4] https://wiki.asterisk.org/wiki/display/AST/Asterisk+Test+Suite+Documentation
[5] https://wiki.asterisk.org/wiki/display/AST/Gerrit+Usage



> [patch]add X.509 subject alternative name support to Asterisk TLS support
> -------------------------------------------------------------------------
>
>                 Key: ASTERISK-25063
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25063
>             Project: Asterisk
>          Issue Type: Improvement
>      Security Level: None
>          Components: Core/General
>            Reporter: Maciej Szmigiero
>            Severity: Minor
>         Attachments: asterisk-cert-alt-names.patch
>
>
> This patch adds X.509 subject alternative name support to Asterisk TLS support.
> This way one X.509 certificate can be used for hosts that can be reached under multiple DNS names or for multiple hosts.
> Currently the code seems to accept multiple subject (CN) fields instead, however according to Mozilla this is not a correct behavior as only the most specific one should be used: https://bugzilla.mozilla.org/show_bug.cgi?id=380656



--
This message was sent by Atlassian JIRA
(v6.2#6252)