From ced3d9158a7a8c676be504bb6cd3b5ffb7cc7f13 Mon Sep 17 00:00:00 2001 From: Viktor Dukhovni Date: Sun, 6 Jul 2014 01:47:29 +1000 Subject: Set optional peername when X509_check_host() succeeds. Pass address of X509_VERIFY_PARAM_ID peername to X509_check_host(). Document modified interface. --- crypto/x509/x509_vfy.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'crypto/x509') diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index b0e1dc036a..7e2916ce09 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -752,7 +752,8 @@ static int check_hosts(X509 *x, X509_VERIFY_PARAM_ID *id) for (i = 0; i < n; ++i) { name = (unsigned char *)sk_OPENSSL_STRING_value(id->hosts, i); - if (X509_check_host(x, name, 0, id->hostflags) > 0) + if (X509_check_host(x, name, 0, id->hostflags, + &id->peername) > 0) return 1; } return n == 0; -- cgit v1.2.3