Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

schannel: verify hostname independent of verify cert #10056

Closed
wants to merge 1 commit into from

Commits on Aug 10, 2023

  1. schannel: verify hostname independent of verify cert

    Prior to this change when CURLOPT_SSL_VERIFYPEER (verifypeer) was off
    and CURLOPT_SSL_VERIFYHOST (verifyhost) was on we did not verify the
    hostname in schannel code.
    
    This fixes KNOWN_BUG 2.8 "Schannel disable CURLOPT_SSL_VERIFYPEER and
    verify hostname". We discussed a fix several years ago in curl#3285 but it
    went stale.
    
    Assisted-by: Daniel Stenberg
    
    Bug: https://curl.haxx.se/mail/lib-2018-10/0113.html
    Reported-by: Martin Galvan
    
    Ref: curl#3285
    
    Fixes curl#3284
    Closes #xxxx
    jay committed Aug 10, 2023
    Configuration menu
    Copy the full SHA
    65dbc71 View commit details
    Browse the repository at this point in the history