[Psi-Devel] wildcard certificate matching

[Justin Karneges]

On Tuesday 04 March 2008 6:28 am, Jesse Thompson wrote:
> Given the following wildcard certificate:
>
> Common name: domain.tld, *.domain.tld
> Domain name: *.domain.tld, domain.tld
> XMPP name: domain.tld
>
> Should the certificate match all of the following JID domains?
>
> domain.tld
> foo.domain.tld
> bar.domain.tld
>
> Psi doesn't allow sub.domain.tld.  So my question is whether this is a
> bug with Psi, or if the certificate isn't being issued correctly (the
> XMPP ICA in this case.)

Hmm, it could be a Psi bug.  Can you share the actual certificate?

-Justin