In an internal environment I have two Windows servers which both have Internal CA Signed SSL Certificates used to implement a Mutual Authentication HTTPS connection. Is it mandated that a CN/DN Validation (DN check against a whitelist of clients) is put in place.
- Are CN checks already in place for any HTTPS connection as per this link?
2. How would a DN check against a whitelist of clients be implemented in this particular situation?
For point 2 I would have thought some sort of application code to check the DN against a list of valid servers. Or could you put the connecting server public certificate in your own key store and whenever a connection is made only those servers with the public certificate in your own store can make a connection?