tree a92292ea1eeac4789ac10722f2b6158d4e620ea7
parent 40dfa54bdb5431f7440dc548d2926a74794e5798
author Pete Bentley <prb@google.com> 1606684193 +0000
committer Huizi Yang <yanghuiz@google.com> 1607557930 -0800

[DO NOT MERGE] Reject non-ASCII hostnames and SANs.

Removes the possibility of certificates spoofing DNS names by
exploiting name collisions when lowercasing Unicode characters.
Note that the relevant RFCs mandate that domain names in
certificates should be stored using IDNA 2008 rules, i.e. as
ASCII punycode.

Bug: 171980069
Test: atest CtsLibcoreTestCases CtsLibcoreOkHttpTestCases
Change-Id: Idc6db2ce08eb9e8c6af7c587b0787bae9902a0c9
Merged-In: I96d52609ce4966ff11f649ca940de3b02a43b0b2
(cherry picked from commit 815aa54b4d36ededfe584cb28b2058fe2b70ebe0)