Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SANs in x509 objects do not accept wildcards #311

Open
afreudenreich opened this issue Mar 30, 2021 · 0 comments
Open

SANs in x509 objects do not accept wildcards #311

afreudenreich opened this issue Mar 30, 2021 · 0 comments

Comments

@afreudenreich
Copy link

afreudenreich commented Mar 30, 2021

Hi everyone,
I tried to add wildcards to an x509 object and it did not work. Many of the certificates we are using have wildcards as part of the SANs field.
According to RFC5280 wildcards are accepted in the SANs field:

Finally, the semantics of subject alternative names that include wildcard characters (e.g., as a placeholder for a set of names) are not addressed by this specification. Applications with specific requirements MAY use such names, but they must define the semantics.

Adding the wildcard to an x509 object did not work using the WebUI or the PyMisp library - presumably because the wildcard domain is being checked for being a valid hostname as the template uses the hostname type for dns_names.

One more thing: IP addresses are also allowed in the SANs field, but probably wouldn't pass the host validation (not tested).

Thanks for any help in advance!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant