Subject: | SSL_verifycn_scheme and wildcards |
I do not think this is a bug, more something that could be documented
(or set a sensible default?).
The CN in the certificate was *.givex.com. The certificate was rejected
as I was talking to dev.givex.com because it was not an exact match.
To make sure this matched (because a wildcard is present) I needed to do
the following:
use Net::SSLGlue::LWP;
use XML::Compile::WSDL11;
use XML::Compile::SOAP11;
use XML::Compile::Transport::SOAPHTTP;
# code code code
{
local $Net::SSLGlue::LWP::SSLopts{SSL_ca_file} =
$self->_config->{ssl}->{root_ca_file};
$Net::SSLGlue::LWP::SSLopts{SSL_verifycn_scheme} = {
wildcards_in_cn => 'anywhere',
check_cn => 'when_only'
}
# code code code
};