acciduck / jscep

Automatically exported from code.google.com/p/jscep
MIT License
0 stars 0 forks source link

Raise warning when self-signed certificate uses a different subject name #71

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
The SCEP specification states:

"If the requester does not have an appropriate existing certificate, then a 
locally generated self-signed certificate MUST be used instead.  The 
self-signed certificate MUST use the same subject name as in the PKCS#10 
request."

If the client uses a self-signed certificate, the subject name from the ID 
certificate, and the subject name from the CSR should be compared, and an 
warning raised if they differ.

Original issue reported on code.google.com by da...@grant.org.uk on 16 Aug 2012 at 11:53

GoogleCodeExporter commented 8 years ago

Original comment by da...@grant.org.uk on 16 Aug 2012 at 11:53

GoogleCodeExporter commented 8 years ago
This issue was closed by revision r1498.

Original comment by da...@grant.org.uk on 11 Sep 2012 at 12:20