From: Matthias A. <mat...@gm...> - 2018-08-08 22:18:25
|
Am 08.08.2018 um 23:07 schrieb grarpamp: >> Options for retrieving from ...@mail-olympus.userservices.net: > You might also have problems, later past the hash / bundle step, > with the dns mismatch between the above and what's in the cert. > There's probably a config option to disable just the name checks, > I don't recall offhand what some tools call it. No, there is no such option. They goofed up their "subject alternative name" tags on the server's certificate, that SAN list is incomplete. $ host -t any mail-olympus.userservices.net mail-olympus.userservices.net is an alias for mail.olympus.net.cust.b.hostedemail.com. So the workaround might be to use the latter name as the server's name instead. I am not sure if getaddrinfo() with AI_CANONNAME were good enough to canonicalize the name. I would not want to reintroduce res_search(). |