summaryrefslogtreecommitdiff
path: root/core/curl/valid-ip-is-enough-for-ssl-if-only-ip-is-given.patch.new
blob: e458c8c0091e0101fc0371650a4ff4afc442c753 (plain)
1
2
3
4
5
6
7
8
9
10
11
--- lib/vtls/openssl.c	2016-07-21 21:40:37.014958580 +0200
+++ lib/vtls/openssl.c	2016-07-21 22:22:13.284274185 +0200
@@ -1117,7 +1117,7 @@
 
       /* If a subjectAltName extension of type dNSName is present, that MUST
          be used as the identity. / RFC2818 section 3.1 */
-      if(check->type == GEN_DNS)
+      if(check->type == GEN_DNS && strcmp(conn->ip_addr_str,conn->host.name))
         dNSName = TRUE;
 
       /* only check alternatives of the same type the target is */