Bear Giles writes:
> This patch adds a check that the server certificate common name
> resolves to the other side of the socket.
gethostbyname2() is a GNU thing. AF_INET6 code needs to be #ifdef'd to
something because not every host handles IPv6. Avoid using fixed-size
arrays for names if possible.
Peter Eisentraut peter_e(at)gmx(dot)net
In response to
pgsql-patches by date
|Next:||From: Peter Eisentraut||Date: 2002-05-27 20:29:23|
|Subject: Re: SSL (patch 5)|
|Previous:||From: Peter Eisentraut||Date: 2002-05-27 20:26:12|
|Subject: Re: SSL (patch 3)|