Return-Path: X-Original-To: apmail-hc-dev-archive@www.apache.org Delivered-To: apmail-hc-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 0F0D610859 for ; Sun, 11 Jan 2015 15:45:34 +0000 (UTC) Received: (qmail 25717 invoked by uid 500); 11 Jan 2015 15:45:35 -0000 Delivered-To: apmail-hc-dev-archive@hc.apache.org Received: (qmail 25675 invoked by uid 500); 11 Jan 2015 15:45:35 -0000 Mailing-List: contact dev-help@hc.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "HttpComponents Project" Delivered-To: mailing list dev@hc.apache.org Received: (qmail 25664 invoked by uid 99); 11 Jan 2015 15:45:35 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 11 Jan 2015 15:45:35 +0000 Date: Sun, 11 Jan 2015 15:45:35 +0000 (UTC) From: "Oleg Kalnichevski (JIRA)" To: dev@hc.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Resolved] (HTTPCLIENT-1597) BrowserCompatHostnameVerifier doesn't recognize CN MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HTTPCLIENT-1597?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oleg Kalnichevski resolved HTTPCLIENT-1597. ------------------------------------------- Resolution: Fixed Fix Version/s: 4.3.5.1-android Fixed in SVN 4.3.5-android branch http://svn.apache.org/r1650908 Please review / re-test. Oleg > BrowserCompatHostnameVerifier doesn't recognize CN > -------------------------------------------------- > > Key: HTTPCLIENT-1597 > URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1597 > Project: HttpComponents HttpClient > Issue Type: Bug > Components: Android Port, HttpConn > Affects Versions: 4.3.6 > Reporter: bitfire > Fix For: 4.3.5.1-android > > > When using BrowserCompatHostnameVerifierHC4, the Common Name of this certificate: > -----BEGIN CERTIFICATE----- > MIIDRzCCAi+gAwIBAgIJAJJwpVEh5mtSMA0GCSqGSIb3DQEBBQUAMDoxCzAJBgNV > BAYTAkVVMQowCAYDVQQIDAEgMQowCAYDVQQKDAEgMRMwEQYDVQQDDApub2JlbGlz > LmV1MB4XDTE0MTIyMjEzMTg0MVoXDTI0MTIxOTEzMTg0MVowOjELMAkGA1UEBhMC > RVUxCjAIBgNVBAgMASAxCjAIBgNVBAoMASAxEzARBgNVBAMMCm5vYmVsaXMuZXUw > ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRX7OM4ozjue1koBQQtTW > Scqi8gd64Uu+YMY/G+6LZWz1PzFu9M0Ek81FmDb9hIBq/N9u+ODpmXcI0/xz/CGK > 392Ss8DMs9Al+EhH1XFcZXQbmCyFug9tQb1twZSyt5E1gQUGc4uAaEgfFnYMf7ig > s0ThGm9s12Xg95aKxBA76HdiaRA47kn3gslbnowuAWDUv+B32sF+Eu9KHhgOSajF > 1lDp6PmMWopf4CeTSOVXydcLmeuuYZWgLUNT29rmnDN1etwX/50gjhuBgHfvpwvU > 3kDLQVUYWSOpS/V5lJheSpDgVvV9d1JNqSz/uThJAsNel/Y9EU0WuEjYR3Q5wrWX > AgMBAAGjUDBOMB0GA1UdDgQWBBQr4PufCPRQLuck0ArWvxFeWxXL9DAfBgNVHSME > GDAWgBQr4PufCPRQLuck0ArWvxFeWxXL9DAMBgNVHRMEBTADAQH/MA0GCSqGSIb3 > DQEBBQUAA4IBAQAQkj9ImptdJPCPxiUD8+rfQ3EDX7ncDh+I6ExZs+m/WWCXCi+i > 81YRjEheuuhrrlN3cFSYvDoGqEb0zPZFZ3QzHh5J77ocRpqLkgp0Wax7WSihXMvX > ZVtCYzYllHzkER+leRugxvXOllFAfwXdpaLWSPEfZGN9lZNpS/0Mps3JQrEjTa5a > 9QRi08AwHQrQ/HJYsHvxjANsieQ9PEw5LeR4DAfkQNQCxFZWnQinRWEUvWXqjOQ+ > UPzN/pn2gaOR3PrUaZ/dHrRulrkTymgQw4nW4gWzD4SqqJaOunXrQsQC7+P1FUpx > t/1eF4coHxUJkdu3x1vOEDhVrnpfHH0T52K3 > -----END CERTIFICATE----- > is not recognized. getCNs() returns an empty array, while there actually is a CN "nobelis.eu". > This causes the HostnameVerifier to fail incorrectly. > Original issue: https://github.com/bitfireAT/davdroid/issues/424 -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org For additional commands, e-mail: dev-help@hc.apache.org