Horton

Follow the RFCs more closely in libpq server certificate hostname check.

Heikki Linnakangas <heikki.linnakangas@iki.fi>

View on postgr.es
Commit: 58e70cf9fb42c1ad60b8ba730fd129f2ce6fa332
Author: Heikki Linnakangas <heikki.linnakangas@iki.fi>
Date: 2014-09-15T13:16:06Z
Releases: 9.5.0 
Follow the RFCs more closely in libpq server certificate hostname check.

The RFCs say that the CN must not be checked if a subjectAltName extension
of type dNSName is present. IOW, if subjectAltName extension is present,
but there are no dNSNames, we can still check the CN.

Alexey Klyukin

Files

PathChange+/−
src/interfaces/libpq/fe-secure-openssl.c modified +5 −4