You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hc.apache.org by "bitfire (JIRA)" <ji...@apache.org> on 2015/01/10 01:07:34 UTC

[jira] [Created] (HTTPCLIENT-1597) BrowserCompatHostnameVerifier doesn't recognize CN

bitfire created HTTPCLIENT-1597:
-----------------------------------

             Summary: BrowserCompatHostnameVerifier doesn't recognize CN
                 Key: HTTPCLIENT-1597
                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1597
             Project: HttpComponents HttpClient
          Issue Type: Bug
          Components: Android Port, HttpConn
    Affects Versions: 4.3.6
            Reporter: bitfire


When using BrowserCompatHostnameVerifierHC4, the Common Name of this certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

is not recognized. getCNs() returns an empty array, while there actually is a CN "nobelis.eu".

This causes the HostnameVerifier to fail incorrectly.

Original issue: https://github.com/bitfireAT/davdroid/issues/424



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org