Bug ID 703984: Machine Cert agent improperly matches hostname with CN and SAN

Last Modified: Apr 25, 2024

Affected Product(s):
APM-Clients APM(all modules)

Known Affected Versions:
7.1.6, 7.1.6.1, 7.1.7, 7.1.7.1, 7.1.7.2, 7.1.8, 7.1.8.1, 7.1.8.2, 7.1.8.3, 7.1.8.4, 7.1.8.5, 7.1.9, 7.1.9.7, 7.1.9.8, 7.1.9.9

Fixed In:
13.0.1, 12.1.3.2

Opened: Jan 27, 2018

Severity: 3-Major

Symptoms

MacOS Machine certificate agent matches the configured hostname with the actual hostname upon a beginning partial string match.

Impact

Hostname match may be incorrect in these cases.

Conditions

MacOS APM client using Machine Certificate Check agent.

Workaround

There is no workaround at this time.

Fix Information

The MacOS machine certificate check agent now matches on the whole host string rather than a sub string.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips