From edbca503be9dcfa9adb48e7ba6a23233752135a4 Mon Sep 17 00:00:00 2001
From: Ruby Martin <ruby@wolfssl.com>
Date: Mon, 8 Dec 2025 11:04:45 -0700
Subject: [PATCH] Run check for IP address in wolfSSL_X509_check_host()

---
 src/x509.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/x509.c b/src/x509.c
index ea9f9b743..1794a1f7d 100644
--- a/src/x509.c
+++ b/src/x509.c
@@ -14190,6 +14190,13 @@ int wolfSSL_X509_check_host(WOLFSSL_X509 *x, const char *chk, size_t chklen,
         chklen--;
     }
 
+#ifdef WOLFSSL_IP_ALT_NAME
+    ret = CheckIPAddr(dCert, (char *)chk);
+    if (ret == 0) {
+        goto out;
+    }
+#endif /* WOLFSSL_IP_ALT_NAME */
+
     ret = CheckHostName(dCert, (char *)chk, chklen, flags, 0);
 
 out: