This is an automated email from the ASF dual-hosted git repository. zwoop pushed a commit to branch 8.0.x in repository https://gitbox.apache.org/repos/asf/trafficserver.git
The following commit(s) were added to refs/heads/8.0.x by this push: new 00f66f5 Allows the use of certs with no commonName, but with subjectAltNames 00f66f5 is described below commit 00f66f5186d6993b1f190cbdf6a23c88a232064f Author: Randall Meyer <randallme...@yahoo.com> AuthorDate: Wed Nov 7 14:26:32 2018 -0800 Allows the use of certs with no commonName, but with subjectAltNames (cherry picked from commit 458fdb634211801a59de27d284c729c2f84a6e50) --- iocore/net/SSLUtils.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/iocore/net/SSLUtils.cc b/iocore/net/SSLUtils.cc index 67aea04..6b9d8c0 100644 --- a/iocore/net/SSLUtils.cc +++ b/iocore/net/SSLUtils.cc @@ -1486,7 +1486,7 @@ ssl_index_certificate(SSLCertLookup *lookup, SSLCertContext const &cc, X509 *cer if (name->type == GEN_DNS) { ats_scoped_str dns(asn1_strdup(name->d.dNSName)); // only try to insert if the alternate name is not the main name - if (strcmp(dns, subj_name) != 0) { + if (subj_name == nullptr || strcmp(dns, subj_name) != 0) { Debug("ssl", "mapping '%s' to certificates %s", (const char *)dns, certname); if (lookup->insert(dns, cc) >= 0) { inserted = true;