[Net-ssleay-devel] Net::SSLeay::X509_get_subjectAltNames and signin.ebay.de

[Mike McCauley]

Hello Achim,

On Saturday 16 June 2007 21:52, Achim Grolms wrote:
> On Saturday 16 June 2007 05:00, you wrote:
> > > I've choosed signin.ebay.de:443 because Firefox-browser shows
> >
> > I guess its possible that the certifiacte has no subjectAltNames?
>
> Unsure. Why do you think is has not?
> I can see subjectAltNames when pointing Firefox to that URL.
> (I've made a screenshot of my firefox, see
> <http://www.grolmsnet.de/ssleay/firefox_shows_cert.png>)
>
> But signin.ebay.de:443 is public reachable, me question is:
> Can you help me and check if my assumption "Test of
> subjectAltNames should work with signin.ebay.de:443"
> ist correct? Just to have a base for further discussions?

It turns out there was a problem with X509_get_subjectAltNames not working 
when the 	subjectAltNAmes are the first extension. 

This problem has now been fixed in the latest SVN update.

Hope that helps.
Cheers.

>
> Thanky you,
> Achim

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS, NetWare etc.