Re: commit: ldap/libraries/libldap tls_o.c

[Howard Chu]

h...@openldap.org wrote:
Update of /repo/OpenLDAP/pkg/ldap/libraries/libldap
Modified Files:
        tls_o.c  1.8 ->  1.9

Log Message:
Check for CN length match as well in chkhost

Fyi, tls_g.c (GnuTLS support) already does this correctly. A quick browse thru 
my Mozilla source tree shows that MozNSS does this check incorrectly. I will 
probably have to write an equivalent chkhost function for tls_m.c and disable 
their default verifier.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/