1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-23 00:00:06 +01:00
libwebsockets/lib/tls
=?UTF-8?q?Samuel=20Lor=C3=A9tan?= 31d1d73f74 openssl: Allow IP-based SAN in automatic hostname check
With OpenSSL, `X509_VERIFY_PARAM_set1_host` only checks matching hostnames and alternative names that are domain-based.

This change tries calling `X509_VERIFY_PARAM_set1_ip_asc` first, which attempts to parse the hostname as an IP address (v4 or v6). If this fails, it'll fall back to the current `X509_VERIFY_PARAM_set1_host` behavior.
2018-12-07 06:00:24 +08:00
..
mbedtls clean: general whitespace cleanup 2018-11-23 08:47:56 +08:00
openssl openssl: Allow IP-based SAN in automatic hostname check 2018-12-07 06:00:24 +08:00
private.h clean: general whitespace cleanup 2018-11-23 08:47:56 +08:00
tls-client.c adopt: allow associated accepted vhost connections to specific role 2018-12-01 11:05:59 +08:00
tls-server.c role: raw-proxy 2018-12-01 11:05:59 +08:00
tls.c clean: general whitespace cleanup 2018-11-23 08:47:56 +08:00