On Mon, Jan 26, 2015 at 01:07:54PM +0300, Serj wrote: > Thank you for answer. > > So, your recomendation is to use X509_check_host rather than code from wiki? Yes, definitely, provided of course you're linking with OpenSSL 1.0.2 or later. -- Viktor.