CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/08/26 10:25:12
Modified files:
lib/libcrypto/x509: x509_verify.c
Log message:
Don't drop X509_V_ERR_HOSTNAME_MISMATCH when verify callback returns 1
While not the advised way of using the verify callback (either by OpenSSL
or by us) in production, sometimes folks like to return 1 from everything
in the callback and then check the error return and make decicions about
things.
This fix ensures that such callbacks will see the hostname mismatch and
be able to act upon them.
Reported by Alexander Aleksandrovic Klimov
ok tb@
