[exim] CNAME smarthost certificate name verification

Top Page
This message is part of the following thread:
Mthe complete thread tree sorted by date
 
 
Delete this message
Reply to this message
Author: Kevin Shell
Date:  
To: exim-users
Subject: [exim] CNAME smarthost certificate name verification
Hello list.

Exim doesn't compare CNAME with certificate names, for example

smtp.mail.yahoo.com
smtp.outlook.com

It compares A/AAAA hostnames with certificate names
With OpenSSL: SSL verify error: certificate name mismatch
With GnuTLS: TLS certificate verification failed: cert name mismatch

Is it a bug that Exim not compare CNAME with certificate names?


This message was posted to the following mailing lists:
Exim-users
Mailing List Info | Nearby Messages		<-Re: [exim] Includecontent not updated[exim] Exim 4.93 published->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)