Emilia Kasper 95929797a0 Fix hostname validation in the command-line tool to honour negative return values.
Specifically, an ASN.1 NumericString in the certificate CN will fail UTF-8 conversion
and result in a negative return value, which the "x509 -checkhost" command-line option
incorrectly interpreted as success.

Also update X509_check_host docs to reflect reality.

Thanks to Sean Burford (Google) for reporting this issue.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(cherry picked from commit 0923e7df9eafec6db9c75405d7085ec8581f01bd)
2015-02-10 15:36:03 +01:00
..
2015-01-22 09:31:38 +00:00
2015-01-22 09:31:38 +00:00
2015-01-23 00:12:39 +00:00
2015-01-22 14:11:04 +00:00
2015-01-26 11:06:28 -05:00
2015-01-22 16:12:26 +00:00
2015-01-22 09:31:38 +00:00
2015-01-22 09:31:38 +00:00
2011-08-12 12:31:08 +00:00
2014-06-10 23:20:55 +02:00
2015-02-09 13:01:15 +00:00
2015-01-22 09:31:38 +00:00
2015-01-22 09:31:38 +00:00
2015-01-22 09:31:38 +00:00
2015-01-22 09:31:38 +00:00
2015-01-22 09:31:38 +00:00
2015-01-22 16:16:24 +00:00
2013-05-20 00:16:18 +02:00
2015-01-22 09:31:38 +00:00