[openssl-dev] [openssl.org #3988] [PATCH] X509_check_host() has existed since 1.0.2

David Woodhouse via RT rt at openssl.org
Wed Aug 5 14:53:06 UTC 2015


I was *distinctly* upset, some years ago, to find that OpenSSL couldn't
do this for me and I had to do it myself. Now I see it can, and I can
fix my own code to use that facility thus:

http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/674881cbb

It looks like I can use it from 1.0.2 onwards though, not 1.1.0 as the
documentation suggests:

diff --git a/doc/crypto/X509_check_host.pod b/doc/crypto/X509_check_host.pod
index eab2586..5804115 100644
--- a/doc/crypto/X509_check_host.pod
+++ b/doc/crypto/X509_check_host.pod
@@ -135,6 +135,6 @@ L<X509_VERIFY_PARAM_set1_ipasc(3)|X509_VERIFY_PARAM_set1_ipasc(3)>
 
 =head1 HISTORY
 
-These functions were added in OpenSSL 1.1.0.
+These functions were added in OpenSSL 1.0.2.
 
 =cut

-- 
David Woodhouse                            Open Source Technology Centre
David.Woodhouse at intel.com                              Intel Corporation

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5691 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150805/43b8dac2/attachment.bin>
-------------- next part --------------
_______________________________________________
openssl-bugs-mod mailing list
openssl-bugs-mod at openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod


More information about the openssl-dev mailing list