wt/mongoose
1
0 Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-10-25 12:04:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

add IPv6 SAN

Browse Source
This commit is contained in:
Sergio R. Caprile committed 2026-04-01 14:21:42 -03:00
1 parent b1c2ffe1a0
commit ce23baca7d
2 files changed
+16 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

mongoose.c
+8 -2
View File
@@ -14222,12 +14222,18 @@ static int mg_tls_verify_cert_san(const uint8_t *der, size_t dersz,
if (!server_ip->is_ip6 &&
*((uint32_t *) name.value) == server_ip->addr.ip4)
return 1; // and matches the one we're connected to
} else { // this is a text SAN
#if MG_ENABLE_IPV6
} else if (name.type == 0x87 && name.len == 16) { // is an IPv6 address
MG_VERBOSE(("Found SAN, IPv6: %M", mg_print_ip6, name.value));
if (server_ip->is_ip6 && memcmp(name.value, server_ip->addr.ip6, 16) == 0)
return 1; // and matches the one we're connected to
#endif
} else { // this is a text SAN
MG_VERBOSE(("Found SAN, (%u): %.*s", name.type, name.len, name.value));
if (mg_match(mg_str(server_name), mg_str_n((char *) name.value, name.len),
NULL))
return 1; // and matches the host name
} // TODO(): add IPv6 comparison, more items ?
}
}
return -1;
}
src/tls_builtin.c
+8 -2
View File
@@ -1507,12 +1507,18 @@ static int mg_tls_verify_cert_san(const uint8_t *der, size_t dersz,
if (!server_ip->is_ip6 &&
*((uint32_t *) name.value) == server_ip->addr.ip4)
return 1; // and matches the one we're connected to
} else { // this is a text SAN
#if MG_ENABLE_IPV6
} else if (name.type == 0x87 && name.len == 16) { // is an IPv6 address
MG_VERBOSE(("Found SAN, IPv6: %M", mg_print_ip6, name.value));
if (server_ip->is_ip6 && memcmp(name.value, server_ip->addr.ip6, 16) == 0)
return 1; // and matches the one we're connected to
#endif
} else { // this is a text SAN
MG_VERBOSE(("Found SAN, (%u): %.*s", name.type, name.len, name.value));
if (mg_match(mg_str(server_name), mg_str_n((char *) name.value, name.len),
NULL))
return 1; // and matches the host name
} // TODO(): add IPv6 comparison, more items ?
}
}
return -1;
}