Skip to content

Can't connect to a server presenting a certificate with an IP address in its common name #184

@jbg

Description

@jbg

ClientSession requires a DNSNameRef for the hostname argument, but a DNSNameRef cannot be constructed from an IP address.

In some situations (in my case, connecting to a PostgreSQL server) the server presents a valid certificate, signed by a trusted CA, for a specific IP address. As far as I can tell this is a valid use of TLS certificates, but it doesn't seem possible to support it with rustls at present.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions