On Feb 18, 2011, at 9:37 AM, hyc@symas.com wrote:

Closing this ITS. It's not a regression and not a bug, just a long =

established=20

feature.

Right, the bug is listing non-fully-qualified names as subjects in the = certificate.

So, generally speaking, subject names checks fail, as they should fail, = when the asserted name is not fully-qualified.

The intent of the code is avoid always failing when the = non-fully-qualified asserted name can be securely transformed into a = fully-qualified name. This is a feature.

-- Kurt=