Rustls is unable to handle TLS certificates with IP addresses in SAN DNS names about webpki

[lucacasonato]

I think this is a bug on DigitalOcean's side, so I have raised a support ticket there too. I think there is probably nothing actionable for webpki to do here.

It'd be really nice if the webpki error messages could tell me the root cause for things like this, so I don't have to add println statements in the webpki source to figure out where things are going wrong.

[mvforell]

This should be fixed as soon as #54 is fixed.

[lucacasonato]

@mvforell I don't think so. The issue here is that there is an IP address in a SAN DNS record, not an IP address record.

[ereslibre]

@lucacasonato It has the IP address as a SAN at the end too, so with #260 it should work.

[lucacasonato]

Yes, but it errors as soon as it reaches the invalid DNS SAN record. So even with #54 it will still crash

[ereslibre]

Yes, but it errors as soon as it reaches the invalid DNS SAN record. So even with #54 it will still crash

Yes, sorry for the noise, that's right.