Skip to content

restrict wildcard cert match to a single label in matchServer#208

Open
arib06 wants to merge 1 commit into
eclipse-ee4j:masterfrom
arib06:wildcard-cert-single-label
Open

restrict wildcard cert match to a single label in matchServer#208
arib06 wants to merge 1 commit into
eclipse-ee4j:masterfrom
arib06:wildcard-cert-single-label

Conversation

@arib06

@arib06 arib06 commented Jul 14, 2026

Copy link
Copy Markdown

tighten matchServer so a wildcard certificate name like *.example.com only matches a single leftmost label, otherwise it also matches multi-label hosts such as a.b.example.com contrary to RFC 6125.

Signed-off-by: mohammed arib <arib@bugqore.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant