[Freeipa-devel] [freeipa PR#490][comment] [WIP] certdb: use certutil and match_hostname for cert verification

[tiran]

  URL: https://github.com/freeipa/freeipa/pull/490
Title: #490: [WIP] certdb: use certutil and match_hostname for cert verification

tiran commented:
"""
Do we ensure that the function is always called with an IDN A-Label encoded hostname? ```ssl.match_hostname``` assumes that all parts are A-labels, not U-labels.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/490#issuecomment-281305611