mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-06 19:10:53 +02:00
a39e8ae976
Add wolfssl_local_MatchDnsNameConstraint() dispatching wildcard names to the subtree matcher and literal names to plain base-name matching, and use it for the ASN_DNS_TYPE branches of PermittedListOk() and IsInExcludedList(). This also drops the outer name->len >= base len byte-length guard for literal DNS names. That guard ran before MatchBaseName() could strip the absolute-FQDN trailing dot, so a constraint base like DNS:example.com. never matched the SAN example.com it denotes.
Before creating any new configure files (.conf) read the CONF_FILES_README.md