On Sat, 12 Jul 2014, David Woodhouse wrote:
Before GnuTLS 3.3.6, the gnutls_x509_crt_check_hostname() function didn't
actually check IP addresses in SubjectAltName, even though it was explicitly
documented as doing so. So do it ourselves...
Ugh. Thanks for this patch!
I only have one little concern here and that would be those old legacy systems
without IPv6 support. I'll work in a little #ifdef into this before I push.
--
/ daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
