I was *distinctly* upset, some years ago, to find that OpenSSL couldn't do this for me and I had to do it myself. Now I see it can, and I can fix my own code to use that facility thus:
http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/674881cbb It looks like I can use it from 1.0.2 onwards though, not 1.1.0 as the documentation suggests: diff --git a/doc/crypto/X509_check_host.pod b/doc/crypto/X509_check_host.pod index eab2586..5804115 100644 --- a/doc/crypto/X509_check_host.pod +++ b/doc/crypto/X509_check_host.pod @@ -135,6 +135,6 @@ L<X509_VERIFY_PARAM_set1_ipasc(3)|X509_VERIFY_PARAM_set1_ipasc(3)> =head1 HISTORY -These functions were added in OpenSSL 1.1.0. +These functions were added in OpenSSL 1.0.2. =cut -- David Woodhouse Open Source Technology Centre david.woodho...@intel.com Intel Corporation
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ openssl-bugs-mod mailing list openssl-bugs-...@openssl.org https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod
_______________________________________________ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
