[cabfpub] IP addresses in SANs

Gervase Markham gerv at mozilla.org
Tue Aug 18 08:13:11 MST 2015


Hi everyone,

https://bugzilla.mozilla.org/show_bug.cgi?id=1148766 is Mozilla's
investigation of certs using IP addresses in SANs.

Our engineer says that as long as you do the proper SANs first and the
ones with IP addresses encoded as DNS names last, then it should work
everywhere, presumably as Firefox will find the good ones (which match)
and accept them, and software which doesn't understand them will skip
over them and use the broken ones.

Please let us know if your testing says something different.

Gerv


More information about the Public mailing list