=?UTF-8?q?Samuel=20Lor=C3=A9tan?=
authored
With OpenSSL, `X509_VERIFY_PARAM_set1_host` only checks matching hostnames and alternative names that are domain-based. This change tries calling `X509_VERIFY_PARAM_set1_ip_asc` first, which attempts to parse the hostname as an IP address (v4 or v6). If this fails, it'll fall back to the current `X509_VERIFY_PARAM_set1_host` behavior.
Name | Last commit | Last update |
---|---|---|
.. | ||
mbedtls | ||
openssl | ||
private.h | ||
tls-client.c | ||
tls-server.c | ||
tls.c |