< Previous by Date Date Index Next by Date >
  Thread Index Next in Thread >

[reSIProcate] proposed changes to cert-derived peer name handling


Hi,

Currently we have the getPeerName function which returns a Data. In addition to the (minor) overhead of creating a Data, the function only works if there is a single sip or sips URI in the subjectAltName. The subjectAltName can actually contain a stack of URIs here and it could be reasonable to get a certificate that covers both sip:sip.example.com and sip:example.com.

I think we should add a new function with the following signature:

bool matchesPeerName(Uri)

This would just check the Uri to see if it is in the stack of names from the subjectAltName and return yes or no.

thoughts?

thanks,
-rohan