res_pjsip: Don't allow a leading period when wildcard matching

The reference identifier (what the client provides - in this case a
hostname) must start with a domain label, not a `.`.

The current implementation will match `.seanbright.com` against
`*.seanbright.com` which is incorrect.

diff --git a/res/res_pjsip/pjsip_transport_events.c b/res/res_pjsip/pjsip_transport_events.c
index 65a740cb2c98d06f11c1feb7c548ebdc68a64f7d..5aeb8f87b43c05957f90b7cfdd64d33c546d8dcd 100644 (file)
--- a/res/res_pjsip/pjsip_transport_events.c
+++ b/res/res_pjsip/pjsip_transport_events.c
@@ -212,7 +212,7 @@ static int verify_cert_name(const pj_str_t *local, const pj_str_t *remote)
        }
 
        p = pj_strchr(local, '.');
-       if (!p) {
+       if (!p || p == pj_strbuf(local)) {
                return 0;
        }