walkero
/
nghttp2
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

nghttpx: Wildcard match for CN

This commit is contained in:
Tatsuhiro Tsujikawa 2016-04-21 22:53:07 +09:00
parent 9b81eec944
commit bc2b941866
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/shrpx_ssl.cc
View File

@ -1011,14 +1011,19 @@ int verify_hostname(X509 *cert, const StringRef &hostname,
return -1; return -1;
} }
auto rv = util::strieq(hostname, cn); if (cn[cn.size() - 1] == '.') {
OPENSSL_free(const_cast<char *>(cn.c_str())); if (cn.size() == 1) {
OPENSSL_free(const_cast<char *>(cn.c_str()));
if (rv) { return -1;
return 0; }
cn = StringRef{cn.c_str(), cn.size() - 1};
} }
return -1; auto rv = tls_hostname_match(cn, hostname);
OPENSSL_free(const_cast<char *>(cn.c_str()));
return rv ? 0 : -1;
} }
} // namespace } // namespace