| commit | 8241005bfa9b49ebe3c60c85a6b30b97eeb3884e | [log] [tgz] |
|---|---|---|
| author | Adam Langley <agl@chromium.org> | Fri Jun 20 12:00:00 2014 -0700 |
| committer | Adam Langley <agl@chromium.org> | Fri Jun 20 13:17:42 2014 -0700 |
| tree | fbc1aa6da05fcc4f14c07e8013a5590f54339ad9 | |
| parent | 4c65f3a2f12b9aa300a08242f03117f32e1f628a [diff] |
Client-side namecheck wildcards. A client reference identity of ".example.com" matches a server certificate presented identity that is any sub-domain of "example.com" (e.g. "www.sub.example.com). With the X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS flag, it matches only direct child sub-domains (e.g. "www.sub.example.com"). (cherry picked from commit e52c52f10bb8e34aaf8f28f3e5b56939e8f6b357) (Imported from upstream's 3cc8a3f2343cda796de90c127b9e907ca3ec2da5)