check goodness of cn field

2026-07-28 08:45:22 +02:00 · 2012-05-31 20:10:46 -07:00
parent f0e044a555
commit 50f78b8afb
1 changed files with 4 additions and 1 deletions
@@ -140,7 +140,10 @@ class index:
        if not CSR.csr_goodkey(csr):
            self.die(r, r.UnsafeKey, nonce)
            return
-        # TODO: check goodness of cn field
+        if not CSR.can_sign(CSR.cn(csr)):
+            self.die(r, r.CannotIssueThatName, nonce)
+            return
+        # TODO: check goodness of subjectAltName fields!
        self.sessions.make_request(self.session, (nonce, CSR.cn(csr), csr))
        r.proceed.timestamp = int(time.time())
        r.proceed.polldelay = 10