SSL (patch 4)
This patch adds a check that the server certificate common name
resolves to the other side of the socket.
It also seems to have bits that were supposed to be in the
previous patch. Probably operator error - a combined patch
will be posted in a few minutes.
Bear
Attachments:
patch4text/plain; charset=US-ASCIIDownload+212-56
Bear Giles writes:
This patch adds a check that the server certificate common name
resolves to the other side of the socket.
gethostbyname2() is a GNU thing. AF_INET6 code needs to be #ifdef'd to
something because not every host handles IPv6. Avoid using fixed-size
arrays for names if possible.
--
Peter Eisentraut peter_e@gmx.net
gethostbyname2() is a GNU thing.
Curiously this worked when I just tried compiling this on OpenBSD,
but
AF_INET6 code needs to be #ifdef'd to
something because not every host handles IPv6.
that particular code didn't work and I was already debating trying
to remove it. I'll add this to the list...
Bear