markt-asf commented on PR #1098: URL: https://github.com/apache/tomcat/pull/1098#issuecomment-6633190517
I was putting more weight on the CAB requirements but it is a fair point that not all clients will follow those for private CAs or self-signed certs. In the scenario that triggered this, SERVER_AUTH_EXTENDED_KEY_USAGE_OID is going to present anyway so the discussion is likely to be moot. In all other cases I'd expect a unique alias. I'm happy to withdraw point 1. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
