Changeset 7347 in josm

Timestamp:

2014-07-29T00:32:15+02:00 (10 years ago)

Author:

Don-vip

Message:

see #10033 - add new entry dns:127.0.0.1 to make it work with IE

Location:

trunk/src/org/openstreetmap/josm/io/remotecontrol

Files:

• DNSName.java (added)
• RemoteControlHttpsServer.java (modified) (2 diffs)

trunk/src/org/openstreetmap/josm/io/remotecontrol/RemoteControlHttpsServer.java

@@ -54 +54 @@
 import sun.security.x509.CertificateVersion;
 import sun.security.x509.CertificateX509Key;
-import sun.security.x509.DNSName;
 import sun.security.x509.ExtendedKeyUsageExtension;
 import sun.security.x509.GeneralName;
@@ -230 +229 @@
 
             X509Certificate cert = generateCertificate("CN=localhost, OU=JOSM, O=OpenStreetMap", pair, 1825, "SHA256withRSA",
-                    "dns:localhost,ip:127.0.0.1,ip:::1,uri:https://127.0.0.1:"+HTTPS_PORT+",uri:https://::1:"+HTTPS_PORT);
+                    // see #10033#comment:20: All browsers respect "ip" in SAN, except IE which only understands DNS entries:
+                    // https://connect.microsoft.com/IE/feedback/details/814744/the-ie-doesnt-trust-a-san-certificate-when-connecting-to-ip-address
+                    "dns:localhost,ip:127.0.0.1,dns:127.0.0.1,ip:::1,uri:https://127.0.0.1:"+HTTPS_PORT+",uri:https://::1:"+HTTPS_PORT);
 
             KeyStore ks = KeyStore.getInstance("JKS");