hyc@OpenLDAP.org wrote:

Update of /repo/OpenLDAP/pkg/ldap/libraries/libldap

Modified Files: tls_o.c 1.8 -> 1.9

Log Message: Check for CN length match as well in chkhost

Fyi, tls_g.c (GnuTLS support) already does this correctly. A quick browse thru my Mozilla source tree shows that MozNSS does this check incorrectly. I will probably have to write an equivalent chkhost function for tls_m.c and disable their default verifier.