From: Siavash Tavakoli Date: Thu, 18 Mar 2021 12:20:35 +0000 (+0000) Subject: lib-ssl-iostream: Ignore case when checking certificate name X-Git-Tag: 2.3.15~132 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8d84e36e312d523dd93b821e63f16a5a22e77fbf;p=thirdparty%2Fdovecot%2Fcore.git lib-ssl-iostream: Ignore case when checking certificate name Host name case must be ignored when cheking with certificate. --- diff --git a/src/lib-ssl-iostream/iostream-openssl-common.c b/src/lib-ssl-iostream/iostream-openssl-common.c index f02f615471..2a685a656c 100644 --- a/src/lib-ssl-iostream/iostream-openssl-common.c +++ b/src/lib-ssl-iostream/iostream-openssl-common.c @@ -106,14 +106,14 @@ static bool openssl_hostname_equals(const char *ssl_name, const char *host) { const char *p; - if (strcmp(ssl_name, host) == 0) + if (strcasecmp(ssl_name, host) == 0) return TRUE; /* check for *.example.com wildcard */ if (ssl_name[0] != '*' || ssl_name[1] != '.') return FALSE; p = strchr(host, '.'); - return p != NULL && strcmp(ssl_name+2, p+1) == 0; + return p != NULL && strcasecmp(ssl_name+2, p+1) == 0; } bool openssl_cert_match_name(SSL *ssl, const char *verify_name,