Skip to content

Commit e25e436

Browse files
committed
allow san/cn to be an exact match for the domain name
1 parent 724ca9a commit e25e436

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

src/GlobalSignCAProxy/GlobalSignCAProxy.cs

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,7 @@
2828
using System.Linq;
2929
using System.Security.Policy;
3030
using System.Text;
31+
using System.Text.RegularExpressions;
3132
using System.Threading;
3233
using System.Web.Services.Configuration;
3334

@@ -139,13 +140,15 @@ public override EnrollmentResult Enroll(ICertificateDataReader certificateDataRe
139140
if (sanDict["dns"].Count() > 0)
140141
{
141142
string dnsSan = sanDict["dns"][0];
142-
matchedDomains = validDomains.Where(d => dnsSan.EndsWith($".{d.DomainName}", StringComparison.OrdinalIgnoreCase)).ToList();
143+
matchedDomains = validDomains.Where(d => dnsSan.Equals(d.DomainName, StringComparison.OrdinalIgnoreCase)
144+
|| dnsSan.EndsWith($".{d.DomainName}", StringComparison.OrdinalIgnoreCase)).ToList();
143145
commonName = dnsSan;
144146
}
145147
}
146148
else
147149
{
148-
matchedDomains = validDomains.Where(d => commonName.EndsWith($".{d.DomainName}", StringComparison.OrdinalIgnoreCase)).ToList();
150+
matchedDomains = validDomains.Where(d => commonName.Equals(d.DomainName, StringComparison.OrdinalIgnoreCase)
151+
|| commonName.EndsWith($".{d.DomainName}", StringComparison.OrdinalIgnoreCase)).ToList();
149152
}
150153

151154
if (matchedDomains == null || matchedDomains.Count == 0)

0 commit comments

Comments
 (0)