Changeset 6055aff in mod_gnutls

Timestamp:

Jan 29, 2013, 3:41:38 PM (8 years ago)

Author:

Daniel Kahn Gillmor <dkg@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, proxy-ticket, upstream

Children:

dab7a25

Parents:

e2b936e

git-author:

Daniel Kahn Gillmor <dkg@…> (01/20/13 00:51:29)

git-committer:

Daniel Kahn Gillmor <dkg@…> (01/29/13 15:41:38)

Message:

warn if the server hostname cannot be found in the certificate

File:

• src/gnutls_hooks.c (modified) (1 diff)

src/gnutls_hooks.c

@@ -548 +548 @@
    
         int ret = gnutls_x509_crt_check_hostname(tsc->certs_x509_chain[tsc->certs_x509_chain_num-1], s->server_hostname);
-    
+    if (0 == ret)
+        ap_log_error(APLOG_MARK, APLOG_INFO, 0, s,
+                     "GnuTLS: Error checking certificate for hostname "
+                     "'%s'", s->server_hostname);
         return check_server_aliases(x, s, tsc);
 }