Re: CVE Request: libesmtp does not check NULL bytes in commonName

[Ludwig Nussel <ludwig.nussel () suse de>]

ArkanoiD wrote:
> And according to the draft we MUST ignore non-leaf value even if
> it is the only one CN, just incorrectly placed.

Many self-signed certificates seem to have an email address as leaf
RDN. I guess that's because openssl's CA.sh asks for the mail
address. So with that additional constraint the scary warning
dialogs for self-signed certs are going to be even more confusing in
the future.

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\   
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)