Christophe Fergeau fa640286f4 ssl: Don't try hostname check if cert subject check fails ... Currently, SSL verification of the peer certificate checks if the certificate's subject CN or one of its subjectAltName match the hostname. If this succeeds, then the verification succeeds. Otherwise openssl_verify() checks the cert subject if this was set, which means it checks the certificate's subject (not just its CN) matches exactly the cert subject string that is set in SpiceSession. Given that the cert subject is something the user specifies in addition to the hostname, the cert subject check should have priority over the hostname check, that is, when we have a cert subject set, the success/failure of the cert subject cert should determine the success/failure of openssl_verify(), and the hostname check should only be carried out when no cert subject was set. This fixes rhbz#871034		2013-10-11 10:21:54 +02:00
build-aux	build-sys: make it a seperately buildable spice-common library	2012-03-22 20:21:05 +01:00
common	ssl: Don't try hostname check if cert subject check fails	2013-10-11 10:21:54 +02:00
m4	build-sys: make it a seperately buildable spice-common library	2012-03-22 20:21:05 +01:00
python_modules	python_modules/ptypes.py/EnumBaseType.c_enumname: add missing return to fix broken enums generation	2012-06-14 13:53:46 +03:00
spice-protocol@8b436f8a3e	Remove INLINE usage	2013-10-04 12:45:00 +02:00
.gitmodules	build-sys: make it a seperately buildable spice-common library	2012-03-22 20:21:05 +01:00
autogen.sh	build-sys: make it a seperately buildable spice-common library	2012-03-22 20:21:05 +01:00
configure.ac	build-sys: add --enable-smartcard=auto	2013-09-26 19:03:31 +02:00
git.mk	Update git.mk to latest version	2012-09-21 10:51:17 +02:00
Makefile.am	spice-common: don't install spice-protocol	2012-08-09 12:44:41 +02:00
spice1.proto	support seamless migration	2012-08-27 09:06:26 +03:00
spice_codegen.py	codegen: include headers locally	2012-03-21 13:24:17 +01:00
spice.proto	proto: add fake last message in base channel	2013-09-12 13:49:25 +02:00