Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Verify server sans when specifying alt server certs #1330

Open
dovholuknf opened this issue Sep 24, 2023 · 0 comments
Open

Verify server sans when specifying alt server certs #1330

dovholuknf opened this issue Sep 24, 2023 · 0 comments

Comments

@dovholuknf
Copy link
Member

It's very easy to misconfigure certs and alt server certs with overlapping SANS. It would be helpful to introspect the certificates and alt server certs and panic on startup if the two settings allow for overlapping alt server certs. When the sans overlap, non deterministic behavior occurs making it hard to track down the actual issue
plorenz added a commit that referenced this issue Sep 28, 2023
@plorenz
Merge pull request #1330 from openziti/buffer-size-fixes
1b8b134 
Ensure buffers are big enough for UDP datagrams. Fixes #1329
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
Security/IdP Features & Capabilities
Status: Todo
Milestone
No milestone
Development

No branches or pull requests
1 participant
@dovholuknf