414824 - Only the first CN of SSL certificate containing multiple CNs is recognized in SSL/TLS sessions

Status: RESOLVED DUPLICATE of bug 380656

(SeaMonkey :: Security, defect)

Description

[Michael Vorobyov]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.8.1.11) Gecko/20071128 SeaMonkey/1.1.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; ru-RU; rv:1.8.1.11) Gecko/20071128 SeaMonkey/1.1.7

When browsing to a site, fetching or sending mail using SSL/TLS to/from server which has an SSL certificate containing multiple CN values, only the first CN in the certificate matches.

Reproducible: Always

Steps to Reproduce:
Browse to a site that has a certificate with multiple CN values as any name
other than the first CN value, for example:
https://vds.mic6090.pp.ru/
https://mic6090.firstvds.ru/
Actual Results:  
When trying to access second link above, Seamonkey complains that the site name doesn't match the certificate. The dialog box contains only the first CN from the certificate (vds.mic6090.pp.ru in this case)

Expected Results:  
It should match on all CNs in the certificate and not present the dialog box.

This bug is the same as bug 380656 (https://bugzilla.mozilla.org/show_bug.cgi?id=380656)

Comment 1

[Tobias Fischer]

I close this Bug as Duplicate to Bug 380656 now, which was filed for Firefox and is older, but doesn't match the right Product and Component too.

Right Product for this Bug seems to be "NSS" and the SSL/TSL Library as Component. This should be changed in Bug 380656.