diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-12-05 18:35:20 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-12-05 18:35:20 +0000 |
| commit | 3bf15e2974f416cb970ef54fae0f600ec299000e (patch) | |
| tree | e5eee2ff6fe2245b552813dce2741b1bec28647b /crypto/x509/x509_txt.c | |
| parent | 8df400cf8de73f2377f6931735c386b1480300ad (diff) | |
| download | openssl-3bf15e2974f416cb970ef54fae0f600ec299000e.tar.gz | |
Integrate host, email and IP address checks into X509_verify.
Add new verify options to set checks.
Remove previous -check* commands from s_client and s_server.
Diffstat (limited to 'crypto/x509/x509_txt.c')
| -rw-r--r-- | crypto/x509/x509_txt.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/crypto/x509/x509_txt.c b/crypto/x509/x509_txt.c index 595efcead3..361cd21987 100644 --- a/crypto/x509/x509_txt.c +++ b/crypto/x509/x509_txt.c @@ -197,6 +197,12 @@ const char *X509_verify_cert_error_string(long n) return("Suite B: curve not allowed for this LOS"); case X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256: return("Suite B: cannot sign P-384 with P-256"); + case X509_V_ERR_HOSTNAME_MISMATCH: + return("Hostname mismatch"); + case X509_V_ERR_EMAIL_MISMATCH: + return("Email address mismatch"); + case X509_V_ERR_IP_ADDRESS_MISMATCH: + return("IP address mismatch"); default: BIO_snprintf(buf,sizeof buf,"error number %ld",n); |