[exim] CNAME smarthost certificate name verification

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Kevin Shell
Date:  
À: exim-users
Sujet: [exim] CNAME smarthost certificate name verification
Hello list.

Exim doesn't compare CNAME with certificate names, for example

smtp.mail.yahoo.com
smtp.outlook.com

It compares A/AAAA hostnames with certificate names
With OpenSSL: SSL verify error: certificate name mismatch
With GnuTLS: TLS certificate verification failed: cert name mismatch

Is it a bug that Exim not compare CNAME with certificate names?