Promote inconsistent DNS subjectAltName check to production.

InCommon · Dec 13, 2013 · 21a2e98 · 21a2e98
1 parent 6b35d09
commit 21a2e98
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
@@ -429,6 +429,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="X509CertificateRSAExponentValidator"/>
+                            <!-- Error on inconsistent subjectAltNames. -->
+                            <bean parent="X509CertificateConsistentNameValidator"/>
 
                             <!--
                                 Debian weak key blacklists.

diff --git a/mdx/uk/verbs.xml b/mdx/uk/verbs.xml
@@ -179,8 +179,7 @@
                     p:id="checkCertificates">
                     <property name="validators">
                         <list>
-                            <!-- Error on inconsistent subjectAltNames. -->
-                            <bean parent="X509CertificateConsistentNameValidator"/>
+                            <!-- none at present -->
                         </list>
                     </property>
                 </bean>