feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

draft

Browse Source
This commit is contained in:
Stanislav Klima
2022-06-14 13:37:49 +02:00
parent fb9f90b98b
commit a0dd92234b
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/internal.c
View File

@ -10500,6 +10500,7 @@ int CheckHostName(DecodedCert* dCert, const char *domainName, size_t domainNameL
ret = 0; ret = 0;
} }
#ifndef ONLY_ALT_NAME_VERIFICATION
if (checkCN == 1) { if (checkCN == 1) {
if (MatchDomainName(dCert->subjectCN, dCert->subjectCNLen, if (MatchDomainName(dCert->subjectCN, dCert->subjectCNLen,
domainName) == 1) { domainName) == 1) {
@ -10509,6 +10510,7 @@ int CheckHostName(DecodedCert* dCert, const char *domainName, size_t domainNameL
WOLFSSL_MSG("DomainName match on common name failed"); WOLFSSL_MSG("DomainName match on common name failed");
} }
} }
#endif /* #ifndef ONLY_ALT_NAME_VERIFICATION */
return ret; return ret;
} }
@ -11333,6 +11335,7 @@ int DoVerifyCallback(WOLFSSL_CERT_MANAGER* cm, WOLFSSL* ssl, int ret,
} }
} }
} }
#ifndef ONLY_ALT_NAME_VERIFICATION
else { else {
if (args->dCert->subjectCN) { if (args->dCert->subjectCN) {
if (MatchDomainName(args->dCert->subjectCN, if (MatchDomainName(args->dCert->subjectCN,
@ -11344,6 +11347,13 @@ int DoVerifyCallback(WOLFSSL_CERT_MANAGER* cm, WOLFSSL* ssl, int ret,
} }
} }
} }
#else /* #ifndef ONLY_ALT_NAME_VERIFICATION */
else {
if (ret == 0) {
ret = DOMAIN_NAME_MISMATCH;
}
}
#endif /* #ifndef ONLY_ALT_NAME_VERIFICATION */
} }
/* perform IP address check on the peer certificate */ /* perform IP address check on the peer certificate */