search

AMWA-TV / bcp-003

AMWA BCP-003 Security recommendations for NMOS APIs
https://specs.amwa.tv/bcp-003
Apache License 2.0
3 stars 3 forks source link

BCP-003-01: Name matching between DNS-SD names and cert CN/SANs #28

Closed garethsb closed 5 years ago

garethsb commented 5 years ago

Not sure where to note this, but one thing for implementers to bear in mind is that names returned from DNS-SD seem often to have the trailing '.' that indicates an FQDN (e.g. "mocks.testsuite.nmos.tv."), whereas certs are normally issued with CN/SANs that are DNS names without the (implied...) trailing '.' (e.g. "mocks.testsuite.nmos.tv"). Name matching needs to take this into account, although RFC 2818 does not make it clear.

('transferred' from https://github.com/AMWA-TV/nmos-testing/issues/207)

NEOAdvancedTechnology commented 5 years ago

Request Sony to draft a note and make a PR