Add X.509 subject alternative name support to TLS certificate

verification.

This way one X.509 certificate can be used for hosts that
can be reached under multiple DNS names or for multiple hosts.

Signed-off-by: Maciej Szmigiero <mail@maciej.szmigiero.name>

ASTERISK-25063 #close

Change-Id: I13302c80490a0b44c43f1b45376c9bd7b15a538f
This commit is contained in:
Maciej Szmigiero
2015-05-15 00:12:41 +02:00
parent 1ba7845851
commit 2415a14ce9
3 changed files with 60 additions and 16 deletions

View File

@@ -65,6 +65,7 @@
#ifdef DO_SSL
#include <openssl/ssl.h>
#include <openssl/err.h>
#include <openssl/x509v3.h>
#else
/* declare dummy types so we can define a pointer to them */
typedef struct {} SSL;