Update HostnameVerifierTest for consistency with our new hostname verifier.
Behavior changes
- CN name doesn't match if SubjectAltNames exist (RFC 2818 3.1)
- Subdomains are strict. *.google.com matches a.google.com but not a.b.google.com.
(RFC 2818 3.1)
- We don't forbid wildcards on public domains. *.com and *.co.jp are both allowed.
It's the CA's responsibility to not hand out broad-matching certificates.
Bug: http://b/3299188
Change-Id: I373e36436de452c70e6d06107329cfa8f4dc7964
2 files changed