> > 
> > Is there somewhere I can look at the correct code to check the DNS name
> > in a subjectAltName?
> > 
> 
> Not in the OpenSSL core code but it isn't hard. You just have to loop through
> the GENERAL_NAME STACK and look for a type GEN_DNS and check the dNSName field
> of those.
> 

in curl, in lib/ssluse.c there is a routine verifyhost that does
what is required (and more, i.e; it also chacks an IP address etc.

==  http://curl.haxx.se 

peter
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to