root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity

fixup! apps/cmp.c: fix use of SSL_set_tlsext_host_name() for SNI and X509_VERIFY_PARAM_set1_host()

This commit is contained in:
Dr. David von Oheimb 2025-07-31 17:10:16 +02:00 committed by Dr. David von Oheimb
parent 6350ca4bb6
commit 319af73f1e
2 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/cmp.c
View File

@ -528,7 +528,7 @@ const OPTIONS cmp_options[] = {
"Trusted certificates to use for verifying the TLS server certificate;"}, "Trusted certificates to use for verifying the TLS server certificate;"},
{OPT_MORE_STR, 0, 0, "this implies hostname validation"}, {OPT_MORE_STR, 0, 0, "this implies hostname validation"},
{"tls_host", OPT_TLS_HOST, 's', {"tls_host", OPT_TLS_HOST, 's',
"Address to be used for SNI and to be checked during TLS hostname validation"}, "Name (or address) to use in SNI and verify in the TLS server certificate"},
#endif #endif
OPT_SECTION("Client-side debugging"), OPT_SECTION("Client-side debugging"),

10
doc/man1/openssl-cmp.pod.in
View File

@ -115,7 +115,7 @@ TLS connection options:
[B<-tls_keypass> I<arg>] [B<-tls_keypass> I<arg>]
[B<-tls_extra> I<filenames>|I<uris>] [B<-tls_extra> I<filenames>|I<uris>]
[B<-tls_trusted> I<filenames>|I<uris>] [B<-tls_trusted> I<filenames>|I<uris>]
[B<-tls_host> I<address>] [B<-tls_host> I<host>]
Client-side debugging options: Client-side debugging options:
@ -1030,11 +1030,11 @@ The certificate verification options
B<-verify_hostname>, B<-verify_ip>, and B<-verify_email> B<-verify_hostname>, B<-verify_ip>, and B<-verify_email>
have no effect on the certificate verification enabled via this option. have no effect on the certificate verification enabled via this option.
=item B<-tls_host> I<address> =item B<-tls_host> I<host>
Address to be used for Server Name Indication (SNI) according to RFC 3546 section 3.1 Hostname or IP address to be checked in the TLS server certificate.
and to be checked during TLS hostname validation. Usually, this is a DNS name, which is then also used for
This may be a DNS name (for SNI, only this is used) or an IPv4 or IPv6 address. Server Name Indication (SNI) according to RFC 3546 section 3.1.
If not given it defaults to the host part of the B<-server> option URL argument. If not given it defaults to the host part of the B<-server> option URL argument.
=back =back