➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author christian.heimes
Recipients christian.heimes
Date 2016-09-17.18:15:01
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1474136102.17.0.179768982424.issue28191@psf.upfronthosting.co.za>
In-reply-to
Content 
The standard subject alternative DNS name contains only a relationship between a cert and a host name. A host may have multiple services like HTTPS web server, IMAP server, mail servers etc. https://tools.ietf.org/html/rfc4985 defines a mechanism to define a relationship between a X.509 cert, a DNS name and a service, e.g. _https.www.example.org for service https on www.example.org.

OpenSSL is not yet able to convert a RFC4985 SRVName to a string. I have a patch, https://github.com/tiran/cpython/commits/feature/ssl_srvname
History
Date User Action Args
2016-09-17 18:15:02christian.heimessetrecipients: + christian.heimes
2016-09-17 18:15:02christian.heimessetmessageid: <1474136102.17.0.179768982424.issue28191@psf.upfronthosting.co.za>
2016-09-17 18:15:02christian.heimeslinkissue28191 messages
2016-09-17 18:15:01christian.heimescreate