Skip to content

crypto: remove wildcard options for checkEmail - #41599

Closed
tniessen wants to merge 1 commit into
nodejs:masterfrom
tniessen:crypto-remove-x509-checkemail-wildcard-options
Closed

crypto: remove wildcard options for checkEmail#41599
tniessen wants to merge 1 commit into
nodejs:masterfrom
tniessen:crypto-remove-x509-checkemail-wildcard-options

Conversation

@tniessen

Copy link
Copy Markdown
Member

Wildcard options do not affect X509_check_email.

Refs: openssl/openssl#17536
Refs: #41571

Wildcard options do not affect X509_check_email.
Refs: openssl/openssl#17536
Refs: nodejs#41571
@tniessentniessen added the request-ci Add this label to start a Jenkins CI on a PR. label Jan 19, 2022
@nodejs-github-botnodejs-github-bot added crypto Issues and PRs related to the crypto subsystem. doc Issues and PRs related to the documentations. labels Jan 19, 2022
@tniessen
tniessen requested a review from jasnellJanuary 19, 2022 18:18
@github-actionsgithub-actionsBot removed the request-ci Add this label to start a Jenkins CI on a PR. label Jan 19, 2022
@nodejs-github-bot

This comment has been minimized.

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

@tniessentniessen added the tls Issues and PRs related to the tls subsystem. label Jan 19, 2022
bnb
bnb approved these changes Jan 19, 2022

@bnbbnb left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 if they truly have no effect

@tniessentniessen added the author ready PRs that have at least one approval, no pending requests for changes, and a CI started. label Jan 20, 2022
@tniessen

Copy link
Copy Markdown
MemberAuthor

+1 if they truly have no effect

To elaborate, these four options only affect how OpenSSL's X509_check_host handles *.example.com, a*.example.com, *b.example.com, etc. For email addresses, X.509 uses the RFC 822 mailbox syntax, which does not permit any of these wildcard patterns, and OpenSSL's X509_check_email will ignore wildcards regardless of whether these options are set or not :)

@tniessen

Copy link
Copy Markdown
MemberAuthor

cc @nodejs/crypto

panva pushed a commit that referenced this pull request Jan 22, 2022
Wildcard options do not affect X509_check_email.
Refs: openssl/openssl#17536
Refs: #41571
PR-URL: #41599
Reviewed-By: Tierney Cyren <hello@bnb.im>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
@panva

Copy link
Copy Markdown
Member

Landed in 5aa4010

@panvapanva closed this Jan 22, 2022
@tniessen

Copy link
Copy Markdown
MemberAuthor

Thanks for reviewing, @bnb and @panva!

BethGriggs pushed a commit that referenced this pull request Jan 25, 2022
Wildcard options do not affect X509_check_email.
Refs: openssl/openssl#17536
Refs: #41571
PR-URL: #41599
Reviewed-By: Tierney Cyren <hello@bnb.im>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
@ruyadornoruyadorno mentioned this pull request Feb 8, 2022
danielleadams pushed a commit that referenced this pull request Feb 28, 2022
Wildcard options do not affect X509_check_email.
Refs: openssl/openssl#17536
Refs: #41571
PR-URL: #41599
Reviewed-By: Tierney Cyren <hello@bnb.im>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
danielleadams pushed a commit that referenced this pull request Mar 2, 2022
Wildcard options do not affect X509_check_email.
Refs: openssl/openssl#17536
Refs: #41571
PR-URL: #41599
Reviewed-By: Tierney Cyren <hello@bnb.im>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
danielleadams pushed a commit that referenced this pull request Mar 3, 2022
Wildcard options do not affect X509_check_email.
Refs: openssl/openssl#17536
Refs: #41571
PR-URL: #41599
Reviewed-By: Tierney Cyren <hello@bnb.im>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
danielleadams pushed a commit that referenced this pull request Mar 14, 2022
Wildcard options do not affect X509_check_email.
Refs: openssl/openssl#17536
Refs: #41571
PR-URL: #41599
Reviewed-By: Tierney Cyren <hello@bnb.im>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author readyPRs that have at least one approval, no pending requests for changes, and a CI started.cryptoIssues and PRs related to the crypto subsystem.docIssues and PRs related to the documentations.tlsIssues and PRs related to the tls subsystem.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@tniessen@nodejs-github-bot@panva@bnb