diff options
author | Erich Eckner <git@eckner.net> | 2016-07-22 14:00:43 +0200 |
---|---|---|
committer | Erich Eckner <git@eckner.net> | 2016-07-22 14:00:43 +0200 |
commit | 016acc24d45cee97fc9e23ef83c5213916b6f29f (patch) | |
tree | d9ff31352e9057d29da8f9e4edd0016d58f59547 /core/curl/valid-ip-is-enough-for-ssl-if-only-ip-is-given.patch.new | |
parent | 7143a6618fe2614d49701256cdc1fd0dc9b4c748 (diff) | |
download | crux-patches-016acc24d45cee97fc9e23ef83c5213916b6f29f.tar.xz |
curl: valid-ip-is-enough-for-ssl-if-only-ip-is-given
Diffstat (limited to 'core/curl/valid-ip-is-enough-for-ssl-if-only-ip-is-given.patch.new')
-rw-r--r-- | core/curl/valid-ip-is-enough-for-ssl-if-only-ip-is-given.patch.new | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/core/curl/valid-ip-is-enough-for-ssl-if-only-ip-is-given.patch.new b/core/curl/valid-ip-is-enough-for-ssl-if-only-ip-is-given.patch.new new file mode 100644 index 0000000..e458c8c --- /dev/null +++ b/core/curl/valid-ip-is-enough-for-ssl-if-only-ip-is-given.patch.new @@ -0,0 +1,11 @@ +--- lib/vtls/openssl.c 2016-07-21 21:40:37.014958580 +0200 ++++ lib/vtls/openssl.c 2016-07-21 22:22:13.284274185 +0200 +@@ -1117,7 +1117,7 @@ + + /* If a subjectAltName extension of type dNSName is present, that MUST + be used as the identity. / RFC2818 section 3.1 */ +- if(check->type == GEN_DNS) ++ if(check->type == GEN_DNS && strcmp(conn->ip_addr_str,conn->host.name)) + dNSName = TRUE; + + /* only check alternatives of the same type the target is */ |