haskell-tls / hs-certificate

Certificate and Key Reader/Writer in haskell
60 stars 57 forks source link

Failure when missing Common Name #47

Closed pbrisbin closed 9 years ago

pbrisbin commented 9 years ago

Example: www.random.org

This certificate lacks a Common Name and fails here.

This certificate works fine in other clients such as Chrome or cURL.

As per RFC 6125, published in '2011 the validator must check SAN first, and if SAN exists, then CN should not be checked.