[Psi-Devel] wildcard certificate matching

Jesse Thompson jesse.thompson at doit.wisc.edu
Tue Mar 4 06:28:59 PST 2008


Given the following wildcard certificate:

Common name: domain.tld, *.domain.tld
Domain name: *.domain.tld, domain.tld
XMPP name: domain.tld

Should the certificate match all of the following JID domains?

domain.tld
foo.domain.tld
bar.domain.tld

Psi doesn't allow sub.domain.tld.  So my question is whether this is a 
bug with Psi, or if the certificate isn't being issued correctly (the 
XMPP ICA in this case.)

Jesse
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3340 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.affinix.com/pipermail/psi-devel-affinix.com/attachments/20080304/7e3e8e6b/attachment.bin 


More information about the Psi-Devel mailing list