448269 - seperate CN for SSL connections should be configurable in user interface

Status: RESOLVED DUPLICATE of bug 387480

(Thunderbird :: Security, defect)

Description

[Tobias Volk]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; de; rv:1.8.1.16) Gecko/20080722 Firefox/2.0.0.16
Build Identifier: Version 2.0.0.16 (20080727)

I have an IMAP account at a provider that uses multiple Mail Servers for its customers. All the servers use the same SSL certificate, so they have the same CN, but different Hostnames. This results in an annoying message from Thunderbird that is displayed each time when I connect, which could be avoided if I could specify the expected CN seperate from the DNS Hostname of the server.

Of course I could link that CN with the IP of "my" mail server in /etc/hosts, but this is an ugly hack imho...



Reproducible: Always

Steps to Reproduce:
1. connect to mail server
2. CN of certificate is different from Hostname (but matches expected value)
3. annoying warning appears and nothing can be done about it because expected value cant be specified


Expected Results:  
wxpected CN of SSL certificate should be user configurable (maybe as an extended/advanced setting).