Skip to content

Commit d7a637f

Browse files
authored
x509-cert: domain validated should accept CN even though not recommended (#1815)
1 parent c4a5480 commit d7a637f

File tree

1 file changed

+4
-1
lines changed
  • x509-cert/src/builder/profile/cabf

1 file changed

+4
-1
lines changed

x509-cert/src/builder/profile/cabf/tls.rs

+4-1
Original file line numberDiff line numberDiff line change
@@ -149,7 +149,10 @@ impl CertificateType {
149149
.filter_map(|rdn| {
150150
let out = SetOfVec::<AttributeTypeAndValue>::from_iter(
151151
rdn.iter()
152-
.filter(|attr_value| attr_value.oid == rfc4519::COUNTRY_NAME)
152+
.filter(|attr_value| {
153+
attr_value.oid == rfc4519::COUNTRY_NAME
154+
|| attr_value.oid == rfc4519::COMMON_NAME
155+
})
153156
.cloned(),
154157
)
155158
.ok()?;

0 commit comments

Comments
 (0)