Skip to content

Conversation

joerixaop
Copy link

There seems to be no reason to consider a local hostname as case sensitive when other hostnames are compared case insensitive.

If the behavior needs to be more strict it would be good to document in what way it is more strict than qualified domain names.

There seems to be no reason to consider a local hostname as case
sensitive when other hostnames are compared case insensitive.

If the behavior needs to be more strict it would be good to document in
what way it is more strict.

# TODO: this behavior should probably be more strict
return san == hostname if san_parts.size < 2
return san.downcase == hostname.downcase if san_parts.size < 2
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ssl.rb is mostly copied from openssl gem: https://github.com/ruby/openssl/blob/master/lib/openssl/ssl.rb#L317

you maybe want to post this upstream first, ideally with an actual test-case.

@kares kares closed this Apr 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants