Client: [Qt] TLS certificate error with valid certificate

[ogasser]

Expected behaviour

• I expect to being able to connect securely to my host: https://www.isas-münchen.de/nextcloud
• Connecting via the web browser works correctly
• The certificate includes both domains (with and without www.) in Certificate Subject Alt Name

Actual behaviour

• Cannot connect securely to www.isas-münchen.de:
  The host name did not match any of the valid hosts for this certificate

Steps to reproduce

1. Connect to https://www.isas-münchen.de/nextcloud with Deskopt client
2. Connection TLS certificate error

Is the Certificate Subject Alt Name in certificates not checked? Are XN-Domains not correctly compared in Certificate Subject Alt Name?

[ogoffart]

I can reproduce the issue. It seems to be a problem with the punicode
Related to issue #5530

[ogoffart]

Problem was in Qt, we are fixing it upstream: https://codereview.qt-project.org/187378/
The fix will be in the next version of Qt.

[SamuAlfageme]

Woops, just saw the fix was scheduled for 5.8; removing the RTT tag.

[ogoffart]

Closing as this is fixed upstream in Qt.