com php-src: Fixed #67666 - Subject altName doesn't match wildcards: ext/openssl/xp_ssl.c
| From: | Tjerk Anne Meesters | Date: | Thu, 24 Jul 2014 06:36:31 +0000 |
| Subject: | com php-src: Fixed #67666 - Subject altName doesn't match wildcards: ext/openssl/xp_ssl.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-79576@lists.php.net to get a copy of this message | ||
Commit: 38e714ece52f38963c072434b12174bccedcd1c7
Author: Tjerk Meesters <datibbaw@php.net> Thu, 24 Jul 2014 14:36:31 +0800
Parents: ea1d5dcacb3169f011618a75260217037a075537
Branches: PHP-5.6 master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=38e714ece52f38963c072434b12174bccedcd1c7
Log:
Fixed #67666 - Subject altName doesn't match wildcards
Bugs:
https://bugs.php.net/67666
Changed paths:
M ext/openssl/xp_ssl.c
Diff:
diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c
index 948bb14..03a84bf 100644
--- a/ext/openssl/xp_ssl.c
+++ b/ext/openssl/xp_ssl.c
@@ -321,7 +321,7 @@ static zend_bool matches_san_list(X509 *peer, const char *subject_name TSRMLS_DC
if (san_name_len != strlen((const char*)cert_name)) {
php_error_docref(NULL TSRMLS_CC, E_WARNING, "Peer SAN entry is malformed");
} else {
- is_match = strcasecmp(subject_name, (const char*)cert_name) == 0;
+ is_match = matches_wildcard_name(subject_name, (const char *)cert_name);
}
OPENSSL_free(cert_name);