Changeset 4882 for pjproject

Timestamp:

Jul 25, 2014 7:27:37 AM (10 years ago)

Author:

bennylp

Message:

Misc #1751: added logging when TLS domain verification fails due to invalid use of wildcard. Thanks Alexander Traud for the patch

File:

• pjproject/trunk/pjsip/src/pjsip/sip_transport_tls.c (modified) (1 diff)

pjproject/trunk/pjsip/src/pjsip/sip_transport_tls.c

@@ -1641 +1641 @@
         }
 
-        if (!matched)
+        if (!matched) {
+            if (pj_strnicmp2(&serv_cert->subject.cn, "*.", 2) == 0) {
+                PJ_LOG(1,(tls->base.obj_name,
+                    "RFC 5922 (section 7.2) does not allow TLS wildcard "
+                        "certificates. Advise your SIP provider, please!"));
+            }
             ssl_info.verify_status |= PJ_SSL_CERT_EIDENTITY_NOT_MATCH;
+        }
     }