The pin is the only check: the runtime stops verifying the bus's name #16

Merged

mesh-admin merged 1 commits from fix/the-pin-is-the-only-check into main

2026-09-28 02:03:47 +00:00

Author	SHA1	Message	Date
jschoubben	d4a2802342	The pin is the only check: the runtime stops verifying the bus's name Every module on the new runtime reached the handshake and failed on 'does not match certificate's altnames': the bus's certificate names the seat, not the address a machine dials it by, and pinning the exact certificate already decides everything a name check could. The client's transport spreads the TLS options into Node's tls.connect, so the hostname check is replaced with one that passes and the pinned certificate is the one authority accepted.	2026-09-28 04:03:43 +02:00

Author

SHA1

Message

Date

jschoubben

d4a2802342

The pin is the only check: the runtime stops verifying the bus's name

Every module on the new runtime reached the handshake and failed on 'does not match
certificate's altnames': the bus's certificate names the seat, not the address a machine dials
it by, and pinning the exact certificate already decides everything a name check could. The
client's transport spreads the TLS options into Node's tls.connect, so the hostname check is
replaced with one that passes and the pinned certificate is the one authority accepted.

2026-09-28 04:03:43 +02:00