1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-23 00:00:06 +01:00
libwebsockets/lib/tls/openssl
=?UTF-8?q?Samuel=20Lor=C3=A9tan?= 31d1d73f74 openssl: Allow IP-based SAN in automatic hostname check
With OpenSSL, `X509_VERIFY_PARAM_set1_host` only checks matching hostnames and alternative names that are domain-based.

This change tries calling `X509_VERIFY_PARAM_set1_ip_asc` first, which attempts to parse the hostname as an IP address (v4 or v6). If this fails, it'll fall back to the current `X509_VERIFY_PARAM_set1_host` behavior.
2018-12-07 06:00:24 +08:00
..
lws-genhash.c appveyor: Enable 64-bit build with OpenSSL and HTTP2 2017-11-26 19:16:17 +08:00
lws-genrsa.c clean: general whitespace cleanup 2018-11-23 08:47:56 +08:00
openssl-client.c openssl: Allow IP-based SAN in automatic hostname check 2018-12-07 06:00:24 +08:00
openssl-server.c OpenSSL: fix ECC support build-time check 2018-11-28 15:06:05 +08:00
ssl.c clean: general whitespace cleanup 2018-11-23 08:47:56 +08:00