From 8700031bbbcc75730a6a855989655004661998aa Mon Sep 17 00:00:00 2001
From: M66B <M66B@users.noreply.github.com>
Date: Tue, 7 Jun 2022 07:39:41 +0200
Subject: [PATCH] BIMI: check root domain certificate

---
 app/src/main/java/eu/faircode/email/Bimi.java | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/eu/faircode/email/Bimi.java b/app/src/main/java/eu/faircode/email/Bimi.java
index a7590cc46a..d80ebf26b2 100644
--- a/app/src/main/java/eu/faircode/email/Bimi.java
+++ b/app/src/main/java/eu/faircode/email/Bimi.java
@@ -222,9 +222,11 @@ public class Bimi {
 
                         // Check subject
                         boolean found = false;
+                        String root = UriHelper.getRootDomain(context, domain);
                         List<String> names = EntityCertificate.getDnsNames(cert);
                         for (String name : names)
-                            if (domain.endsWith(name.toLowerCase(Locale.ROOT))) {
+                            if (root != null &&
+                                    root.equalsIgnoreCase(UriHelper.getRootDomain(context, name))) {
                                 found = true;
                                 break;
                             }