]> granicus.if.org Git - apache/commit
In ssl_check_public_cert(), also take dNSNames in the subjectAltName
authorKaspar Brand <kbrand@apache.org>
Wed, 28 Sep 2011 06:52:39 +0000 (06:52 +0000)
committerKaspar Brand <kbrand@apache.org>
Wed, 28 Sep 2011 06:52:39 +0000 (06:52 +0000)
commit2160d8594c2806d2ed71ecfa2d78b9fe6578474c
tree14f864901a865d7dec5b35823db156f906261d82
parent9b5b43cc2bf40a9a34fc6487c48535deeb44ffdf
In ssl_check_public_cert(), also take dNSNames in the subjectAltName
extension into account when checking the cert against the configured
ServerName. PR 32652, PR 47051.

Replace SSL_X509_getCN() by SSL_X509_getIDs(), which returns an array
of a cert's DNS-IDs and CN-IDs (terms as coined by RFC 6125).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176752 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_util_ssl.c
modules/ssl/ssl_util_ssl.h