Michiel Visser 976bb715e0 LibTLS: Correct matching hostname with certificate subject ...

The wildcard specified in a certificates subject can only match a single
level of subdomains. Originally, this function could match multiple
levels of subdomains with a single "*.".

As an example, https://wrong.host.badssl.com/ should fail to load, as
the certificate provided by the server only specifies "*.badssl.com".
However this was correctly matching anyway. With this change this page
now correctly fails to load.

2022-04-17 10:10:19 +04:30

18 KiB

Raw Blame History

View Raw