[HTTPCLIENT-1597] BrowserCompatHostnameVerifier doesn't recognize CN

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.3.6
• Fix Version/s: 4.3.5.1-android
• Component/s: Android Port, HttpClient (classic)
• Assignee: Unassigned
• Reporter: bitfire
• Created: 10/Jan/15 00:07
• Updated: 04/May/17 09:49
• Resolved: 11/Jan/15 15:45

Description

When using BrowserCompatHostnameVerifierHC4, the Common Name of this certificate:

----BEGIN CERTIFICATE----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----END CERTIFICATE----

is not recognized. getCNs() returns an empty array, while there actually is a CN "nobelis.eu".

This causes the HostnameVerifier to fail incorrectly.

Original issue: https://github.com/bitfireAT/davdroid/issues/424