]> granicus.if.org Git - apache/commit
projects / apache / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9b5b43c) | patch
In ssl_check_public_cert(), also take dNSNames in the subjectAltName
authorKaspar Brand <kbrand@apache.org>
Wed, 28 Sep 2011 06:52:39 +0000 (06:52 +0000)
committerKaspar Brand <kbrand@apache.org>
Wed, 28 Sep 2011 06:52:39 +0000 (06:52 +0000)
commit2160d8594c2806d2ed71ecfa2d78b9fe6578474c
tree14f864901a865d7dec5b35823db156f906261d82tree | snapshot
parent9b5b43cc2bf40a9a34fc6487c48535deeb44ffdfcommit | diff
In ssl_check_public_cert(), also take dNSNames in the subjectAltName
extension into account when checking the cert against the configured
ServerName. PR 32652, PR 47051.

Replace SSL_X509_getCN() by SSL_X509_getIDs(), which returns an array
of a cert's DNS-IDs and CN-IDs (terms as coined by RFC 6125).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1176752 13f79535-47bb-0310-9956-ffa450edef68
CHANGES diff | blob | history
modules/ssl/ssl_engine_init.c diff | blob | history
modules/ssl/ssl_util_ssl.c diff | blob | history
modules/ssl/ssl_util_ssl.h diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.