hyc(a)OpenLDAP.org wrote:
Update of /repo/OpenLDAP/pkg/ldap/libraries/libldap
Modified Files:
tls_o.c 1.8 -> 1.9
Log Message:
Check for CN length match as well in chkhost
Fyi, tls_g.c (GnuTLS support) already does this correctly. A quick browse thru
my Mozilla source tree shows that MozNSS does this check incorrectly. I will
probably have to write an equivalent chkhost function for tls_m.c and disable
their default verifier.
--
-- Howard Chu
CTO, Symas Corp.
http://www.symas.com
Director, Highland Sun
http://highlandsun.com/hyc/
Chief Architect, OpenLDAP
http://www.openldap.org/project/