Add X.509 subject alternative name support to TLS certificate

verification.

This way one X.509 certificate can be used for hosts that
can be reached under multiple DNS names or for multiple hosts.

Signed-off-by: Maciej Szmigiero <mail@maciej.szmigiero.name>

ASTERISK-25063 #close

Change-Id: I13302c80490a0b44c43f1b45376c9bd7b15a538f
This commit is contained in:
Maciej Szmigiero
2015-05-15 00:12:41 +02:00
committed by Michael Kuron
parent a58d359701
commit 7b96e8cc3d
3 changed files with 62 additions and 16 deletions

View File

@@ -65,6 +65,7 @@
#ifdef DO_SSL
#include <openssl/ssl.h>
#include <openssl/err.h>
#include <openssl/x509v3.h>
#else
/* declare dummy types so we can define a pointer to them */
typedef struct {} SSL;