Remove checks for consistent certificate alternative names

This was needed circa 2013 to guard against a curl-based issue in the Shibboleth SP. This can no longer affect us because we no longer use the PKIX trust model.
dshafer · Aug 29, 2017 · fe2ddab · fe2ddab
1 parent edb58ad
commit fe2ddab
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 4 deletions.
diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
@@ -306,8 +306,6 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
-                            <!-- Error on inconsistent subjectAltNames. -->
-                            <bean parent="ukf.X509ConsistentNameValidator"/>
 
                             <!--
                                 Debian weak key blacklists.

diff --git a/mdx/uk/verbs.xml b/mdx/uk/verbs.xml
@@ -314,8 +314,6 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
-                            <!-- Error on inconsistent subjectAltNames. -->
-                            <bean parent="ukf.X509ConsistentNameValidator"/>
 
                             <!--
                                 Debian weak key blacklists.