Skip to content

crypto: change default check(Host|Email) behavior

Rodrigo Muino Tomonari requested to merge github/fork/tniessen/crypto-x509-check-flag-subject-default into master

This changes the default behavior of the X509Certificate functions checkHost and checkEmail to match the default behavior of OpenSSL's X509_check_host and X509_check_email functions, respectively, which is also what RFC 2818 mandates for HTTPS.

As demonstrated in the modified test case, the new default matches the behavior of checkServerIdentity.

Refs: https://github.com/nodejs/node/pull/36804 Refs: https://github.com/nodejs/node/pull/41569

Merge request reports