> > > > Is there somewhere I can look at the correct code to check the DNS name > > in a subjectAltName? > > > > Not in the OpenSSL core code but it isn't hard. You just have to loop through > the GENERAL_NAME STACK and look for a type GEN_DNS and check the dNSName field > of those. >
in curl, in lib/ssluse.c there is a routine verifyhost that does what is required (and more, i.e; it also chacks an IP address etc. == http://curl.haxx.se peter ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]