remove displayName validation, potentially harmful

1 year ago · 4172b69816
parent 79501df5a2
commit 4172b69816
1 changed files with 3 additions and 3 deletions
--- a/acme/order.go
+++ b/acme/order.go
@ -356,9 +356,9 @@ func (o *Order) sans(csr *x509.CertificateRequest) ([]x509util.SubjectAlternativ
 			}
 			//orderNames[indexDNS] = wireID.Name
 			//indexDNS++
-			if wireID.Name != csr.Subject.CommonName {
-				return sans, NewError(ErrorBadCSRType, "CSR Subject CommonName should match displayName exactly: CSR Subj CN = %v, displayName = %v", csr.Subject.CommonName, wireID.Name)
-			}
+			//if wireID.Name != csr.Subject.CommonName {
+			//	return sans, NewError(ErrorBadCSRType, "CSR Subject CommonName should match displayName exactly: CSR Subj CN = %v, displayName = %v", csr.Subject.CommonName, wireID.Name)
+			//}
 			orderURIs[indexURI] = wireID.ClientID
 			indexURI++
 			orderURIs[indexURI] = wireID.Handle