The pin is the only check: the runtime stops verifying the bus's name #16

2026-09-28T02:03:45Z

mesh-admin commented

2026-09-28 02:03:45 +00:00

No description provided.

mesh-admin added 1 commit 2026-09-28 02:03:45 +00:00

The pin is the only check: the runtime stops verifying the bus's name d4a2802342

Every module on the new runtime reached the handshake and failed on 'does not match
certificate's altnames': the bus's certificate names the seat, not the address a machine dials
it by, and pinning the exact certificate already decides everything a name check could. The
client's transport spreads the TLS options into Node's tls.connect, so the hostname check is
replaced with one that passes and the pinned certificate is the one authority accepted.

mesh-admin merged commit 46b56d53a6 into main

2026-09-28 02:03:47 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-tools#16