Closed Bug 1765003 Opened 4 years ago Closed 4 years ago

Add a strict variant of mozilla::pkix::CheckCertHostname

Categories

(NSS :: Libraries, enhancement, P3)

enhancement

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: jschanck, Assigned: jschanck)

Details

Attachments

(1 file)

In support of Bug 1691122, moz::pkix should provide a variant of the CheckCertHostname function that automatically enforces strict adherence to the baseline requirements. In particular, it should automatically use a NameMatchingPolicy that never falls back to searching the subject common name.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: