Fixed #67666 - Subject altName doesn't match wildcards

diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c
index 948bb14ebeac0d7ccbe5064db65660ed43788d6f..03a84bf363a3b16332705d6e625f5fc90222163c 100644 (file)
--- a/ext/openssl/xp_ssl.c
+++ b/ext/openssl/xp_ssl.c
@@ -321,7 +321,7 @@ static zend_bool matches_san_list(X509 *peer, const char *subject_name TSRMLS_DC
                if (san_name_len != strlen((const char*)cert_name)) {
                        php_error_docref(NULL TSRMLS_CC, E_WARNING, "Peer SAN entry is malformed");
                } else {
-                       is_match = strcasecmp(subject_name, (const char*)cert_name) == 0;
+                       is_match = matches_wildcard_name(subject_name, (const char *)cert_name);
                }
 
                OPENSSL_free(cert_name);