[prev in list] [next in list] [prev in thread] [next in thread] 

List:       postfix-users
Subject:    Re: Outbound TLS Certificate Verification
From:       wietse () porcupine ! org (Wietse Venema)
Date:       2017-06-16 11:14:28
Message-ID: 3wpySN2JFFzJrP3 () spike ! porcupine ! org
[Download RAW message or body]

Osama Al-Hassani:
> > Which Postfix SMTP client implementation matches server certificates against \
> > server IP addresses?
> 
> We are using 3.2.0 vanilla. 
> 
> To clarify, this is when using the "match" attribute with "verify" security level. \
> I could rephrase the question as to why anything but DNS names are ignored in the \
> SANs field? 

Perhaps because there is no support for IP address matching?

	Wietse


[prev in list] [next in list] [prev in thread] [next in thread]