|
|
|
@ -301,8 +301,8 @@ func (o *order) finalize(db nosql.DB, csr *x509.CertificateRequest, auth SignAut
|
|
|
|
|
|
|
|
|
|
// Validate identifier names against CSR alternative names.
|
|
|
|
|
//
|
|
|
|
|
// Note that with certificate templates we are not going to check for the no
|
|
|
|
|
// presence of other SANs as they will only be set if the templates allows
|
|
|
|
|
// Note that with certificate templates we are not going to check for the
|
|
|
|
|
// absence of other SANs as they will only be set if the templates allows
|
|
|
|
|
// them.
|
|
|
|
|
if len(csr.DNSNames) != len(orderNames) {
|
|
|
|
|
return nil, BadCSRErr(errors.Errorf("CSR names do not match identifiers exactly: CSR names = %v, Order names = %v", csr.DNSNames, orderNames))
|
|
|
|
|