walkero
/
nghttp2
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

nghttpx: Wildcard match for CN

This commit is contained in:
Tatsuhiro Tsujikawa 2016-04-21 22:53:07 +09:00
parent 9b81eec944
commit bc2b941866
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/shrpx_ssl.cc
View File

@ -1011,14 +1011,19 @@ int verify_hostname(X509 *cert, const StringRef &hostname,
return -1;
}
auto rv = util::strieq(hostname, cn);
OPENSSL_free(const_cast<char *>(cn.c_str()));
if (cn[cn.size() - 1] == '.') {
if (cn.size() == 1) {
OPENSSL_free(const_cast<char *>(cn.c_str()));
if (rv) {
return 0;
return -1;
}
cn = StringRef{cn.c_str(), cn.size() - 1};
}
return -1;
auto rv = tls_hostname_match(cn, hostname);
OPENSSL_free(const_cast<char *>(cn.c_str()));
return rv ? 0 : -1;
}
} // namespace