diff --git a/README b/README index a3a0089ba..a88a90ab9 100644 --- a/README +++ b/README @@ -45,6 +45,7 @@ Release 2.3.0 CyaSSL has bug fixes and a few new features including: - SHA-384 cipher suites - Verify cipher suite validity when user overrides - CRL dir monitoring +- DTLS Cookie support, reliability coming soon The CyaSSL manual is available at: http://www.yassl.com/documentation/CyaSSL-Manual.pdf. For build instructions diff --git a/examples/client/client.c b/examples/client/client.c index e6df2d716..ff03d340b 100644 --- a/examples/client/client.c +++ b/examples/client/client.c @@ -88,6 +88,7 @@ static void Usage(void) printf("-d Disable peer checks\n"); printf("-g Send server HTTP GET\n"); printf("-u Use UDP DTLS\n"); + printf("-m Match domain name in cert\n"); } @@ -121,6 +122,7 @@ void client_test(void* args) int sendGET = 0; int benchmark = 0; int doDTLS = 0; + int matchName = 0; int doPeerCheck = 1; char* cipherList = NULL; char* verifyCert = (char*)caCert; @@ -132,7 +134,7 @@ void client_test(void* args) ((func_args*)args)->return_code = -1; /* error state */ - while ((ch = mygetopt(argc, argv, "?gdush:p:v:l:A:c:k:b:")) != -1) { + while ((ch = mygetopt(argc, argv, "?gdusmh:p:v:l:A:c:k:b:")) != -1) { switch (ch) { case '?' : Usage(); @@ -155,6 +157,10 @@ void client_test(void* args) usePsk = 1; break; + case 'm' : + matchName = 1; + break; + case 'h' : host = myoptarg; domain = myoptarg; @@ -325,7 +331,7 @@ void client_test(void* args) CyaSSL_LoadCRL(ssl, crlPemDir, SSL_FILETYPE_PEM, 0); CyaSSL_SetCRL_Cb(ssl, CRL_CallBack); #endif - if (doPeerCheck) + if (matchName && doPeerCheck) CyaSSL_check_domain_name(ssl, domain); #ifdef NON_BLOCKING tcp_set_nonblocking(&sockfd);