ssl_verify_fun.erl icon indicating copy to clipboard operation
ssl_verify_fun.erl copied to clipboard

Published 20 hours ago • verified publisher icon deadtrickster

Proper Handling of IA5String in dNSName field

Open benmmurphy opened this issue 10 years ago • 1 comments

I think we should not process dNSName entries that have characters >= 0x80. Though I don't think this should be a problem because presumably we would never pass unicode names into the verifier only punycode names.

benmmurphy avatar Mar 17 '15 10:03 benmmurphy

I think this generaly related to #8. I'm thinking about diving into erlang source base one more time. In fact asn1 and public_key apps look promising. I mean erlang already capable to decode certificates and maybe it does all validations already or maybe there can be something like helpers

Take a look here for example: https://github.com/erlang/otp/blob/172e812c491680fbb175f56f7604d4098cdc9de4/lib/asn1/src/asn1ct_imm.erl#L686

deadtrickster avatar Mar 19 '15 11:03 deadtrickster