resolved: check for IP in certificate when using DoT with GnuTLS
authorIwan Timmer <irtimmer@gmail.com>
Tue, 29 Oct 2019 19:32:18 +0000 (20:32 +0100)
committerIwan Timmer <irtimmer@gmail.com>
Tue, 29 Oct 2019 19:32:18 +0000 (20:32 +0100)
commit7f2f4faced3fda47e6b76ab73cde747cc20cf8b8
tree9f00e96f4bd2762b760379efa02acedcfec1fcd5
parent38e053c58fa139e0f546f327b5d8ce3db7cf1647
resolved: check for IP in certificate when using DoT with GnuTLS

Validate the IP address in the certificate for DNS-over-TLS in strict mode when GnuTLS is used. As this is not yet the case in contrast to the documentation.
src/resolve/resolved-dnstls-gnutls.c
src/resolve/resolved-dnstls-gnutls.h