<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Taken from X.509: "dNSName is an
Internet domain name defined in accordance with Internet RFC
1035."<br>
<br>
So far, IIRC, the only possible DNS entries that support the
underscore character are of type TXT and SRV. A, AAAA, CNAME, NS,
MX records can't use such a character.<br>
Refering to a TXT entry is useless in a SAN, refering to a SRV
entry may have a meaning (this needs to be discussed). But in that
case, the entry MUST follow RFC2782 format
("_Service._Proto.Name", for example "_xmpp._tcp.godaddy.com").<br>
<br>
Even in such a case, you'll have a DNS entry such as this one:<br>
_xmpp._tcp.godaddy.com. IN SRV 0 1 5222 chat.godaddy.com.<br>
and the certificate would certainly be delivered to
"chat.godaddy.com".<br>
<br>
<pre class="moz-signature" cols="72">--
Erwann ABALEA
</pre>
Le 07/08/2013 06:47, Wayne Thayer a écrit :<br>
</div>
<blockquote cite="mid:CE271F56.514D0%25wthayer@godaddy.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div>
<div>
<div>Can anyone tell me if there is a reason not to allow an
underscore (_) character in a DNSName SAN field? From what
I can tell, a DNSName can contain this character, and I can
do DNS queries that return public FQDNs in the format
"a_b.domain.tld". A
<u>host</u> name does not permit this character, so it may
not work properly in a browser, but from what I can tell,
some other type of service using SSL should be able to
leverage an SSL certificate with this character in the SAN.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>
<div><br>
</div>
<div>Wayne</div>
<div><br>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
</body>
</html>