From 44f3846727d35ab17be3f779caa4a33548cdc152 Mon Sep 17 00:00:00 2001 From: Daniel Silverstone Date: Wed, 14 Aug 2019 20:11:11 +0100 Subject: SSL Error: Enable OpenSSL hostname verification Since OpenSSL 1.0.2 there has been hostname verification support which cURL doesn't turn on for some reason. Turn it on so that we get better hostname verification handling. Signed-off-by: Daniel Silverstone --- utils/messages.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'utils') diff --git a/utils/messages.c b/utils/messages.c index c4a7959cf..0d2085c08 100644 --- a/utils/messages.c +++ b/utils/messages.c @@ -383,9 +383,9 @@ const char *messages_get_sslcode(ssl_cert_err code) /* This certificate has been revoked */ return messages_get_ctx("SSLCertErrRevoked", messages_hash); - case SSL_CERT_ERR_COMMON_NAME: + case SSL_CERT_ERR_HOSTNAME_MISMATCH: /* Common name is invalid */ - return messages_get_ctx("SSLCertErrCommonName", messages_hash); + return messages_get_ctx("SSLCertErrHostnameMismatch", messages_hash); } -- cgit v1.2.3