always add common name as subjectAltName

This commit is contained in:
Maximilian Hils 2016-02-04 18:16:23 +01:00
parent 023026e032
commit 375dbe0703

View File

@ -560,5 +560,7 @@ class TlsLayer(Layer):
if self._sni_from_server_change:
sans.add(self._sni_from_server_change)
sans.discard(host)
# Some applications don't consider the CN and expect the hostname to be in the SANs.
# For example, Thunderbird 38 will display a warning if the remote host is only the CN.
sans.add(host)
return self.config.certstore.get_cert(host, list(sans))