Timeline for Are X.509 nameConstraints on certificates supported on OS X?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 7, 2021 at 8:14 | history | edited | CommunityBot |
replaced https://tools.ietf.org/html/rfc with https://www.rfc-editor.org/rfc/rfc
|
|
| May 13, 2020 at 20:17 | comment | added | lxgr | There is now a public test suite available: nameconstraints.bettertls.com According to this, both Safari and Chrome on my Mac running macOS 10.15.4 support name constraints. | |
| Aug 19, 2019 at 13:35 | comment | added | StackzOfZtuff | @JoeLee-Moyet: Good question! Dunno, I don't have an apple device handy to test. -- Apple's quote "Impact: A certificate may have name constraints applied incorrectly" certainly reads like name constraints ARE in fact supported. | |
| Aug 19, 2019 at 12:46 | comment | added | Joe Lee-Moyet | It looks like this may no longer be the case. I can't find any useful developer documentation (and I don't have a Mac to test on), but iOS change notes at support.apple.com/en-gb/HT208463 and macOS notes at support.apple.com/en-gb/HT208465 mention fixing "A certificate evaluation issue ... in the handling of name constraints". Can anyone confirm when this functionality was first added? | |
| Oct 19, 2016 at 18:07 | history | edited | StackzOfZtuff | CC BY-SA 3.0 |
added 56 characters in body
|
| Oct 19, 2016 at 18:01 | comment | added | jorfus | Thanks for this answer. I'd have spent all day troubleshooting this if I hadn't found your note. Good work on the archived external confirmation too. | |
| Aug 18, 2015 at 22:10 | vote | accept | Thanatos | ||
| Aug 18, 2015 at 5:59 | history | answered | StackzOfZtuff | CC BY-SA 3.0 |