]> git.ipfire.org Git - thirdparty/curl.git/commitdiff
wolfSSL: able to differentiate between IP and DNS in alt names
authorJuliusz Sosinowicz <juliusz@wolfssl.com>
Tue, 4 Nov 2025 17:39:43 +0000 (18:39 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Thu, 6 Nov 2025 14:45:02 +0000 (15:45 +0100)
Fix implemented in https://github.com/wolfSSL/wolfssl/pull/9380

Closes #19364

tests/http/test_17_ssl_use.py

index d0af093af0b6b624395be3739269c44e4f780293..57e1c014042bbc889b5a04a5816c91d60095686d 100644 (file)
@@ -195,8 +195,9 @@ class TestSSLUse:
             pytest.skip("h3 not supported")
         if env.curl_uses_lib('mbedtls'):
             pytest.skip("mbedtls falsely verifies a DNS: altname as IP address")
-        if env.curl_uses_lib('wolfssl'):
-            pytest.skip("wolfSSL falsely verifies a DNS: altname as IP address")
+        if env.curl_uses_lib('wolfssl') and \
+           env.curl_lib_version_before('wolfssl', '5.8.4'):
+            pytest.skip("wolfSSL falsely verifies a DNS: altname as IP address in 5.8.2 and before")
         httpd.set_domain1_cred_name('domain1-very-bad')
         httpd.reload_if_config_changed()
         if proto == 'h3':