Skip to content

BugFix: Normalize CommonName Checks#132

Merged
JeromySt merged 6 commits intomainfrom
user/elantigua/fix-common-name
Jun 5, 2025
Merged

BugFix: Normalize CommonName Checks#132
JeromySt merged 6 commits intomainfrom
user/elantigua/fix-common-name

Conversation

@elantiguamsft
Copy link
Copy Markdown
Contributor

@elantiguamsft elantiguamsft commented Jun 3, 2025

This pull request fixes the X509CommonNameValidator functionality. Previously, the validator compared the entire subject of the signer, formatted as a an X500DistinguishedName against the input. Like SignTool.exe's -n parameter, the validator now checks to make sure the common name string includes the provided input.

Copy link
Copy Markdown

@mayuram2 mayuram2 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we consider renaming commonName to distinguishedName?

Copy link
Copy Markdown

@mayuram2 mayuram2 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instead of comparing the Format() strings, do we compare the RawData of both objects?

@elantiguamsft elantiguamsft reopened this Jun 5, 2025
@JeromySt JeromySt merged commit a013eec into main Jun 5, 2025
17 of 19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants