Co-authored-by: Viktor Dukhovni <viktor1ghub@dukhovni.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
MergeDate: Tue Feb 24 14:05:03 2026
(Merged from https://github.com/openssl/openssl/pull/29612)
X509_VERIFY_PARAM_add1_ip() adds I<ip> as an additional reference
identifier that can match the peer's certificate on success. Any
-previous names set via X509_VERIFY_PARAM_set1_ip(),
+previous addresses set via X509_VERIFY_PARAM_set1_ip(),
X509_VERIFY_PARAM_add1_ip(), X509_VERIFY_PARAM_set1_ip_asc(), or
X509_VERIFY_PARAM_add1_ip_asc() are retained. No change is made on
failure.