From 21a2e986d9a6cfe879779454584376ea03ffa834 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Fri, 13 Dec 2013 14:26:21 +0000
Subject: [PATCH] Promote inconsistent DNS subjectAltName check to production.

---
 mdx/uk/beans.xml | 2 ++
 mdx/uk/verbs.xml | 3 +--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
index 0135788f..9994e58d 100644
--- a/mdx/uk/beans.xml
+++ b/mdx/uk/beans.xml
@@ -429,6 +429,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="X509CertificateRSAExponentValidator"/>
+                            <!-- Error on inconsistent subjectAltNames. -->
+                            <bean parent="X509CertificateConsistentNameValidator"/>
                             
                             <!--
                                 Debian weak key blacklists.
diff --git a/mdx/uk/verbs.xml b/mdx/uk/verbs.xml
index 39c92ada..dbfe6ece 100644
--- a/mdx/uk/verbs.xml
+++ b/mdx/uk/verbs.xml
@@ -179,8 +179,7 @@
                     p:id="checkCertificates">
                     <property name="validators">
                         <list>
-                            <!-- Error on inconsistent subjectAltNames. -->
-                            <bean parent="X509CertificateConsistentNameValidator"/>
+                            <!-- none at present -->
                         </list>
                     </property>
                 </bean>