gnutls_x509_crt_check_hostname() will never compare against IPaddress.

(previous comparison was flawed)

diff --git a/lib/x509/rfc2818_hostname.c b/lib/x509/rfc2818_hostname.c
index 676be348375ac6046785dcd2564e1dc62cf62810..46606fd494b03ce375a91c8e83afc4c6f88f7d86 100644 (file)
--- a/lib/x509/rfc2818_hostname.c
+++ b/lib/x509/rfc2818_hostname.c
@@ -80,16 +80,6 @@ gnutls_x509_crt_check_hostname (gnutls_x509_crt_t cert, const char *hostname)
               return 1;
             }
         }
-      else if (ret == GNUTLS_SAN_IPADDRESS)
-        {
-          found_dnsname = 1;    /* RFC 2818 is unclear whether the CN
-                                   should be compared for IP addresses
-                                   too, but we won't do it.  */
-          if (_gnutls_hostname_compare (dnsname, dnsnamesize, hostname))
-            {
-              return 1;
-            }
-        }
     }
 
   if (!found_dnsname)