On Tue, Aug 15, 2006, Xie Grace Jingru-LJX001 wrote: > Hi, > > Does anyone know where in the certificate verification routine that it > checks the "Common Name" field against the device's interface IP > address? > > Because the interface ip address may change at run time, it's preferred > to have the routine check the CN field against some constant value > instead of the ip. > > If you could point out where the verification code is, I could make a > change. >
OpenSSL doesn't do this check automatically. It is left to an application to check. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
