diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-03-21 22:59:19 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2014-03-21 23:00:53 +0100 |
| commit | 17706d02a18781654b2bbd3672a4a53fc48b038a (patch) | |
| tree | 843182f7c0cddfaf44cf0da84012ee8b29190e41 /tests | |
| parent | a9a2aa2593174958205664e77805d2cec03bb297 (diff) | |
| download | gnutls-17706d02a18781654b2bbd3672a4a53fc48b038a.tar.gz | |
Severely simplified hostname matching.
Now only wildcards only the leftmost position of the string are allowed
(followed by at least two components), and are only taken into account
into ascii strings. Non-ascii strings are compared byte-by-byte.
That means that wildcards in the form bar*foo.example.com
are no longer accepted, as well as wildcards of the form *.*.*.example.com.
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/hostname-check.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/tests/hostname-check.c b/tests/hostname-check.c index 1c07231658..a6b50879ce 100644 --- a/tests/hostname-check.c +++ b/tests/hostname-check.c @@ -303,6 +303,7 @@ char pem4[] = "FAMjWofnMxAyEViiu/HlWoiHu4AbtrsSGMsV1Tr8meRCWrpF\n" "-----END CERTIFICATE-----\n"; +#ifdef SUPPORT_COMPLEX_WILDCARDS /* Certificate with multiple wildcards SAN but no CN. */ char pem6[] = "X.509 Certificate Information:\n" @@ -398,6 +399,7 @@ char pem7[] = "8NsZQVKKLYc1Y4y8LRPhvnxkSnlcGa1RzYZY1s12BZ6OVIfyxD1Z9BcNdqRSq7bQ\n" "kEicsGp5ugGQTNq6aSlzYOUD9/fUP3jDsH7HVb36aCF3waGCQWj+pLqK0LYcW2p/\n" "xnr5+z4YevFBhn7l/fMhg8TzKejxYm7TECg=\n" "-----END CERTIFICATE-----\n"; +#endif /* Certificate with ending wildcard SAN but no CN. */ char pem8[] = @@ -778,6 +780,7 @@ void doit(void) if (ret) fail("%d: Hostname incorrectly matches (%d)\n", __LINE__, ret); +#ifdef SUPPORT_COMPLEX_WILDCARDS if (debug) success("Testing pem6...\n"); data.data = (unsigned char *) pem6; @@ -821,6 +824,7 @@ void doit(void) gnutls_x509_crt_check_hostname(x509, "foobazbar.example.org"); if (!ret) fail("%d: Hostname incorrectly does not match (%d)\n", __LINE__, ret); +#endif if (debug) success("Testing pem8...\n"); |