Check certificate SAN as well as CN values

[digininja]

I just got this warning scanning www.xxx.com

+ Hostname 'www.xxx.com' does not match certificate's names: xxx.com

That name isn't the CN, but is in the SAN so the message isn't quite right. Maybe dump the SAN contents as well as the CN in the "SSL Info" section and then only alert if the the name doesn't match either set.

[sullo]

I'm a little unsure what didn't match on this one. The code below looks like it should capture SANs and merge them into the "name list" which hostname is validated against. I tried this against several sites with SANs and it seems to be ok. Is this still a problem?

	if ($mark->{'ssl_cert_altnames'} ne '') { 
		foreach my $n (split(/, /,$mark->{'ssl_cert_altnames'})) { 
			push(@names, $n);
			}
		}