use Curl_strcasestr() when checking wildcard cert names

diff --git a/lib/ssluse.c b/lib/ssluse.c
index 20b6b7d4567f0babb478dd2e2aff6f4a8e4bf92f..abe29981101350a8d1b2a3bc4534b8e39f0b1ab3 100644 (file)
--- a/lib/ssluse.c
+++ b/lib/ssluse.c
@@ -45,6 +45,7 @@
 #include "inet_pton.h"
 #include "ssluse.h"
 #include "connect.h" /* Curl_ourerrno() proto */
+#include "strequal.h"
 
 #ifdef USE_SSLEAY
 #include <openssl/rand.h>
@@ -754,8 +755,8 @@ cert_hostcheck(const char *certname, const char *hostname)
   if(!strchr(certdomain+1, '.'))
     return 0; /* the certificate must have at least another dot in its name */
 
-  /* find 'certdomain' within 'hostname' */
-  tmp = strstr(hostname, certdomain);
+  /* find 'certdomain' within 'hostname', case insensitive */
+  tmp = Curl_strcasestr(hostname, certdomain);
   if(tmp) {
     /* ok the certname's domain matches the hostname, let's check that it's a
        tail-match */