Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tls: fix inconsistent (hostname vs host) #21450

Closed
wants to merge 1 commit into from

Conversation

thatshailesh
Copy link
Contributor

@thatshailesh thatshailesh commented Jun 21, 2018

Updated error messages and function arguments
Refs: #20892

Checklist
  • make -j4 test (UNIX), or vcbuild test (Windows) passes
  • tests and/or benchmarks are included
  • documentation is changed or added
  • commit message follows commit guidelines

Updated error messages and function arguments
Refs: nodejs#20892
@nodejs-github-bot nodejs-github-bot added the tls Issues and PRs related to the tls subsystem. label Jun 21, 2018
@thatshailesh
Copy link
Contributor Author

Hi @apapirovski no one reviewed this one yet
No option for me to request for review here

@jasnell jasnell added the semver-major PRs that contain breaking changes and should be released in the next major version. label Jul 10, 2018
@trivikr
Copy link
Member

trivikr commented Jul 16, 2018

@jasnell
Copy link
Member

jasnell commented Sep 10, 2018

What's the status on this one?

@jasnell jasnell added the stalled Issues and PRs that are stalled. label Sep 10, 2018
@@ -221,12 +221,12 @@ exports.checkServerIdentity = function checkServerIdentity(hostname, cert) {
valid = wildcard(cn);

if (!valid)
reason = `Host: ${hostname}. is not cert's CN: ${cn}`;
reason = `Hostname: ${hostname} is not cert's CN: ${cn}`;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The removal of the dot misses the, ah, point of unfqdn(), see the comment on line 209. Including the FQDN in the error message is intentional and should not be changed without good reason.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah right, got it, a comment here would be good then because that is most certainly not obvious.

Copy link
Member

@Trott Trott Apr 3, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe wrapping it in quotation marks might help it be mildly more obvious that it's not a typo?

Suggested change
reason = `Hostname: ${hostname} is not cert's CN: ${cn}`;
reason = `Hostname: "${hostname}." is not cert's CN: ${cn}`;

@Trott
Copy link
Member

Trott commented Nov 21, 2018

Given the long time between submission (June 21) and the blocking review (September 26) and now (November 21) the long gap between that and anything happening to move it forward, someone want to make the change and force push to the user's branch just to get this landed? I'm assuming it's a valuable and desirable change.

@fhinkel
Copy link
Member

fhinkel commented Oct 26, 2019

I'm closing this due to inactivity. Please re-open if needed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
semver-major PRs that contain breaking changes and should be released in the next major version. stalled Issues and PRs that are stalled. tls Issues and PRs related to the tls subsystem.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants