Skip to content

Conversation

@tniessen
Copy link
Member

Wildcard options do not affect X509_check_email.

Refs: openssl/openssl#17536
Refs: #41571

Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: nodejs#41571
@tniessentniessen added the request-ci Add this label to start a Jenkins CI on a PR. label Jan 19, 2022
@nodejs-github-botnodejs-github-bot added crypto Issues and PRs related to the crypto subsystem. doc Issues and PRs related to the documentations. labels Jan 19, 2022
@tniessentniessen requested a review from jasnellJanuary 19, 2022 18:18
@github-actionsgithub-actionsbot removed the request-ci Add this label to start a Jenkins CI on a PR. label Jan 19, 2022
@nodejs-github-bot

This comment has been minimized.

@nodejs-github-bot
Copy link
Collaborator

@tniessentniessen added the tls Issues and PRs related to the tls subsystem. label Jan 19, 2022
bnb
bnb approved these changes Jan 19, 2022
Copy link
Contributor

@bnbbnb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 if they truly have no effect

@tniessentniessen added the author ready PRs that have at least one approval, no pending requests for changes, and a CI started. label Jan 20, 2022
@tniessen
Copy link
MemberAuthor

+1 if they truly have no effect

To elaborate, these four options only affect how OpenSSL's X509_check_host handles *.example.com, a*.example.com, *b.example.com, etc. For email addresses, X.509 uses the RFC 822 mailbox syntax, which does not permit any of these wildcard patterns, and OpenSSL's X509_check_email will ignore wildcards regardless of whether these options are set or not :)

@tniessen
Copy link
MemberAuthor

cc @nodejs/crypto

panva pushed a commit that referenced this pull request Jan 22, 2022
Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: #41571 PR-URL: #41599 Reviewed-By: Tierney Cyren <[email protected]> Reviewed-By: Filip Skokan <[email protected]>
@panva
Copy link
Member

Landed in 5aa4010

@panvapanva closed this Jan 22, 2022
@tniessen
Copy link
MemberAuthor

Thanks for reviewing, @bnb and @panva!

BethGriggs pushed a commit that referenced this pull request Jan 25, 2022
Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: #41571 PR-URL: #41599 Reviewed-By: Tierney Cyren <[email protected]> Reviewed-By: Filip Skokan <[email protected]>
Linkgoron pushed a commit to Linkgoron/node that referenced this pull request Jan 31, 2022
Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: nodejs#41571 PR-URL: nodejs#41599 Reviewed-By: Tierney Cyren <[email protected]> Reviewed-By: Filip Skokan <[email protected]>
@ruyadornoruyadorno mentioned this pull request Feb 8, 2022
danielleadams pushed a commit that referenced this pull request Feb 28, 2022
Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: #41571 PR-URL: #41599 Reviewed-By: Tierney Cyren <[email protected]> Reviewed-By: Filip Skokan <[email protected]>
danielleadams pushed a commit that referenced this pull request Mar 2, 2022
Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: #41571 PR-URL: #41599 Reviewed-By: Tierney Cyren <[email protected]> Reviewed-By: Filip Skokan <[email protected]>
danielleadams pushed a commit that referenced this pull request Mar 3, 2022
Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: #41571 PR-URL: #41599 Reviewed-By: Tierney Cyren <[email protected]> Reviewed-By: Filip Skokan <[email protected]>
danielleadams pushed a commit that referenced this pull request Mar 14, 2022
Wildcard options do not affect X509_check_email. Refs: openssl/openssl#17536 Refs: #41571 PR-URL: #41599 Reviewed-By: Tierney Cyren <[email protected]> Reviewed-By: Filip Skokan <[email protected]>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author readyPRs that have at least one approval, no pending requests for changes, and a CI started.cryptoIssues and PRs related to the crypto subsystem.docIssues and PRs related to the documentations.tlsIssues and PRs related to the tls subsystem.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@tniessen@nodejs-github-bot@panva@bnb