<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Bonjour,</div>
<div apple-content-edited="true" class="">
<div class=""><br class="">
</div>
</div>
<div>
<blockquote type="cite" class="">
<div class="">Le 15 avr. 2016 à 08:22, Ryan Sleevi <<a href="mailto:sleevi@google.com" class="">sleevi@google.com</a>> a écrit :</div>
<div class="">
<div dir="ltr" class=""><br class="">
<div class="gmail_extra">
<div class="gmail_quote">On Thu, Apr 14, 2016 at 10:28 PM, Peter Bowen <span dir="ltr" class="">
<<a href="mailto:pzb@amzn.com" target="_blank" class="">pzb@amzn.com</a>></span> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word" class="">
<div class=""><br class="">
</div>
<div class="">I know at least some platforms had issues with empty subject names. </div>
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">That's a good point. For example, OS X has this limitation: a leaf certificate with an empty distinguished name, but has subjectAlternativeNames as a non-critical extension will be rejected.</div>
</div>
</div>
</div>
</div>
</blockquote>
<div><br class="">
</div>
<div>Which is in line with X.509 2012 edition, and RFC5280 (it has been so since RFC2459).</div>
<br class="">
<blockquote type="cite" class="">
<div class="">
<div dir="ltr" class="">
<div class="gmail_extra">
<div class="gmail_quote">
<div class="">Similarly, a leaf certificate that asserts the CA bit with an empty subject will also be rejected, unless it's flagged as accepted that the leaf can be a CA (mostly, this arises with self-signed certs).</div>
</div>
</div>
</div>
</div>
</blockquote>
<div><br class="">
</div>
<div>Again, this is correct behavior, and is not a limitation.</div>
</div>
<br class="">
<div class="">
<div class="">
<div class="">Cordialement,</div>
<div class="">Erwann Abalea</div>
<div class=""><br class="">
</div>
</div>
</div>
</body>
</html>