On Thu, Jan 01, 2015 at 11:09:23PM +0000, Jeremy Harris wrote:
> ------- You are receiving this mail because: -------
> You are on the CC list for the bug.
>
> http://bugs.exim.org/show_bug.cgi?id=1177
[ You probably know this, but just in case. ]
Keep in mind that there is a small overlap between EAI support and
TLS support. The reference identifier for a TLS peer is its ASCII
name. If the conversion of the nexthop domain to ASCII happens
early enough, this may be automatically handled, but otherwise,
any U-labels in the nexthop domain may need to be converted to
A-labels before doing certificate name checks.
In particular, with DANE, the host names handed to the Danessl
library need to be in A-label form.
--
Viktor.
