search

AMWA-TV / bcp-003

AMWA BCP-003 Security recommendations for NMOS APIs
https://specs.amwa.tv/bcp-003
Apache License 2.0
3 stars 3 forks source link

Note on trailing dot in FQDN from DNS-SD vs. cert SANs/CN #32

Closed garethsb closed 5 years ago

garethsb commented 5 years ago

Resolves #28.

mjeras commented 5 years ago

Thanks @garethsb-sony, I've just came across the same problem and it took me a while until I figured it out (didn't notice it in the debugger as it sort of blended with a slash that followed), so this note would be very helpful. Also, I would say the trailing dot is what seems to come from the DNS server itself, the DNS-SD implementation could remove it but I wouldn't expect it to do so. It is interesting that if you put the url with the extra dot into Chrome, it somehow ignores it and the certificate gets validated, but e.g. .NET doesn't do that and the certificate fails validation.