New answers tagged


The checking of the hostname is done in X509_check_host. This function calls the internal function valid_star to make sure that the given wildcard in CN or SAN can actually be used. This function checks that wildcard-CN/SAN like * or *.com are treated as invalid since they are too broad. * is instead acceptable. Thus check is done by counting ...

Top 50 recent answers are included