]> git.ipfire.org Git - thirdparty/curl.git/commit
x509asn1: Fix host altname verification
authorJay Satiro <raysatiro@yahoo.com>
Mon, 14 Dec 2015 21:43:08 +0000 (16:43 -0500)
committerJay Satiro <raysatiro@yahoo.com>
Tue, 15 Dec 2015 19:07:28 +0000 (14:07 -0500)
commit6c2c019654e658a78ccf692f5b8553cef337ec27
treea239d68c602dc02690ead058ddc9e79a64fde45c
parentb4a39491cacde68c9ed5499db7fcc873976e1879
x509asn1: Fix host altname verification

- In Curl_verifyhost check all altnames in the certificate.

Prior to this change only the first altname was checked. Only the GSKit
SSL backend was affected by this bug.

Bug: http://curl.haxx.se/mail/lib-2015-12/0062.html
Reported-by: John Kohl
lib/x509asn1.c