mirror of
https://git.proxmox.com/git/libgit2
synced 2025-05-28 15:58:29 +00:00
ssl: match host names according to RFC 2818 (HTTP over TLS)
This commit is contained in:
parent
dbb36e1b42
commit
16768191c7
26
src/netops.c
26
src/netops.c
@ -194,13 +194,11 @@ int gitno_ssl_teardown(git_transport *t)
|
||||
|
||||
|
||||
#ifdef GIT_OPENSSL
|
||||
/*
|
||||
* This function is based on the one from the cURL project
|
||||
*/
|
||||
/* Match host names according to RFC 2818 rules */
|
||||
static int match_host(const char *pattern, const char *host)
|
||||
{
|
||||
for (;;) {
|
||||
char c = *pattern++;
|
||||
char c = tolower(*pattern++);
|
||||
|
||||
if (c == '\0')
|
||||
return *host ? -1 : 0;
|
||||
@ -211,14 +209,24 @@ static int match_host(const char *pattern, const char *host)
|
||||
if (c == '\0')
|
||||
return 0;
|
||||
|
||||
while (*host) {
|
||||
if (match_host(pattern, host++) == 0)
|
||||
return 0;
|
||||
/*
|
||||
* We've found a pattern, so move towards the next matching
|
||||
* char. The '.' is handled specially because wildcards aren't
|
||||
* allowed to cross subdomains.
|
||||
*/
|
||||
|
||||
while(*host) {
|
||||
char h = tolower(*host);
|
||||
if (c == h)
|
||||
return match_host(pattern, host++);
|
||||
if (h == '.')
|
||||
return match_host(pattern, host);
|
||||
host++;
|
||||
}
|
||||
break;
|
||||
return -1;
|
||||
}
|
||||
|
||||
if (tolower(c) != tolower(*host++))
|
||||
if (c != tolower(*host++))
|
||||
return -1;
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user