Re:Bug in Lynx's SSL certificate validation – leaks password...
by kevin_thibedeau on Saturday August 07, 2021 @04:27PM
(#28101535)
You don't have to invent a new name type.
RFC 5280:
The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate. Defined options include an Internet electronic mail address, a DNS name, an IP address, and a Uniform Resource Identifier (URI). Other options exist, including completely local definitions.
Re:Bug in Lynx's SSL certificate validation – leaks password...
by agwa on Saturday August 07, 2021 @05:21PM
(#28101951)
X509's subject alternative name extension has nothing to do with TLS' SNI extension. SNI does not have a mechanism for locally-defined name types akin to X509's OtherName.
RFC 5280:
The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate. Defined options include an Internet electronic mail address, a DNS name, an IP address, and a Uniform Resource Identifier (URI). Other options exist, including completely local definitions.