mirror of
https://github.com/moparisthebest/curl
synced 2025-02-28 17:31:46 -05:00
use Curl_strcasestr() when checking wildcard cert names
This commit is contained in:
parent
61bded1d82
commit
be72eaa327
@ -45,6 +45,7 @@
|
||||
#include "inet_pton.h"
|
||||
#include "ssluse.h"
|
||||
#include "connect.h" /* Curl_ourerrno() proto */
|
||||
#include "strequal.h"
|
||||
|
||||
#ifdef USE_SSLEAY
|
||||
#include <openssl/rand.h>
|
||||
@ -754,8 +755,8 @@ cert_hostcheck(const char *certname, const char *hostname)
|
||||
if(!strchr(certdomain+1, '.'))
|
||||
return 0; /* the certificate must have at least another dot in its name */
|
||||
|
||||
/* find 'certdomain' within 'hostname' */
|
||||
tmp = strstr(hostname, certdomain);
|
||||
/* find 'certdomain' within 'hostname', case insensitive */
|
||||
tmp = Curl_strcasestr(hostname, certdomain);
|
||||
if(tmp) {
|
||||
/* ok the certname's domain matches the hostname, let's check that it's a
|
||||
tail-match */
|
||||
|
Loading…
x
Reference in New Issue
Block a user