From: Daniel Stenberg <daniel@haxx.se>
Date: Sun, 13 Jun 2004 08:33:26 +0000 (+0000)
Subject: use Curl_strcasestr() when checking wildcard cert names
X-Git-Tag: pre-aifix~61
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=be72eaa327359317568cb5a2549c103826f7e071;p=curl

use Curl_strcasestr() when checking wildcard cert names
---

diff --git a/lib/ssluse.c b/lib/ssluse.c
index 20b6b7d45..abe299811 100644
--- a/lib/ssluse.c
+++ b/lib/ssluse.c
@@ -45,6 +45,7 @@
 #include "inet_pton.h"
 #include "ssluse.h"
 #include "connect.h" /* Curl_ourerrno() proto */
+#include "strequal.h"
 
 #ifdef USE_SSLEAY
 #include <openssl/rand.h>
@@ -754,8 +755,8 @@ cert_hostcheck(const char *certname, const char *hostname)
   if(!strchr(certdomain+1, '.'))
     return 0; /* the certificate must have at least another dot in its name */
 
-  /* find 'certdomain' within 'hostname' */
-  tmp = strstr(hostname, certdomain);
+  /* find 'certdomain' within 'hostname', case insensitive */
+  tmp = Curl_strcasestr(hostname, certdomain);
   if(tmp) {
     /* ok the certname's domain matches the hostname, let's check that it's a
        tail-match */