lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-08-01 10:06:53 +03:00
Code Activity

Merge pull request #3554 from mpg/x509-verify-non-dns-san-dev

Browse Source 
X509 verify non-DNS SANs
This commit is contained in:
Manuel Pégourié-Gonnard
2020-08-14 11:32:22 +02:00
committed by GitHub
parent 3890f7cd3d 204e05404f
commit 8ca03a7b68
7 changed files with 63 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
include/mbedtls/x509_crt.h
View File

@ -585,8 +585,11 @@ int mbedtls_x509_crt_verify_info( char *buf, size_t size, const char *prefix,
* \param crt The certificate chain to be verified.
* \param trust_ca The list of trusted CAs.
* \param ca_crl The list of CRLs for trusted CAs.
* \param cn The expected Common Name. This may be \c NULL if the
* CN need not be verified.
* \param cn The expected Common Name. This will be checked to be
* present in the certificate's subjectAltNames extension or,
* if this extension is absent, as a CN component in its
* Subject name. Currently only DNS names are supported. This
* may be \c NULL if the CN need not be verified.
* \param flags The address at which to store the result of the verification.
* If the verification couldn't be completed, the flag value is
* set to (uint32_t) -1.