Bug 15899 - Self-signed certificates don't have X509v3 Subject Alternative Name for DNS
Summary: Self-signed certificates don't have X509v3 Subject Alternative Name for DNS
Status: RESOLVED FIXED
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: File services (show other bugs)
Version: 4.23.0rc2
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Jule Anger
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-08-26 16:18 UTC by Stefan Metzmacher
Modified: 2025-08-29 12:15 UTC (History)
2 users (show)

See Also:

Attachments
Patch for v4-23-test (9.80 KB, patch)
2025-08-27 04:53 UTC, Stefan Metzmacher 		slow: review+
Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Metzmacher 2025-08-26 16:18:11 UTC 
The self-signed certificates generated by smbd and samba don't have
any X509v3 Subject Alternative Name fields for DNS names.

It's better to add them so that it's easier to use smb over quic.
Comment 1 Samba QA Contact 2025-08-26 22:01:03 UTC 
This bug was referenced in samba master:

6116bc64961fb2330df5ff4256b4ef75dca08cf0
49e179963f56e749dac4e20284dc567e382ccdb2
499656a05011a462b2e44faea7318a02c847de5e
Comment 2 Stefan Metzmacher 2025-08-27 04:53:30 UTC 
Created attachment 18695 [details]
Patch for v4-23-test
Comment 3 Ralph Böhme 2025-08-27 16:42:13 UTC 
Reassigning to Jule for inclusion in 4.23 (only).
Comment 4 Jule Anger 2025-08-28 08:32:57 UTC 
Pushed to autobuild-v4-23-test.
Comment 5 Samba QA Contact 2025-08-28 10:40:20 UTC 
This bug was referenced in samba v4-23-test:

fbb1a8bfd8a807c5f74c40c40e0a60aeb6f83e02
ef469b451688eaaa9c0a0b595e8cfbfa896944f6
20c3ccc7be78a7e1614361064b32d38694439e39
Comment 6 Jule Anger 2025-08-29 12:02:50 UTC 
Closing out bug report.

Thanks!
Comment 7 Samba QA Contact 2025-08-29 12:15:37 UTC 
This bug was referenced in samba v4-23-stable (Release samba-4.23.0rc3):

fbb1a8bfd8a807c5f74c40c40e0a60aeb6f83e02
ef469b451688eaaa9c0a0b595e8cfbfa896944f6
20c3ccc7be78a7e1614361064b32d38694439e39