From 38e714ece52f38963c072434b12174bccedcd1c7 Mon Sep 17 00:00:00 2001 From: Tjerk Meesters Date: Thu, 24 Jul 2014 14:36:31 +0800 Subject: [PATCH] Fixed #67666 - Subject altName doesn't match wildcards --- ext/openssl/xp_ssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c index 948bb14ebe..03a84bf363 100644 --- a/ext/openssl/xp_ssl.c +++ b/ext/openssl/xp_ssl.c @@ -321,7 +321,7 @@ static zend_bool matches_san_list(X509 *peer, const char *subject_name TSRMLS_DC if (san_name_len != strlen((const char*)cert_name)) { php_error_docref(NULL TSRMLS_CC, E_WARNING, "Peer SAN entry is malformed"); } else { - is_match = strcasecmp(subject_name, (const char*)cert_name) == 0; + is_match = matches_wildcard_name(subject_name, (const char *)cert_name); } OPENSSL_free(cert_name); -- 2.50.1