diff src/login-common/ssl-proxy.h @ 13675:7e3afd2252fd

login proxy: Verify that remote hostname matches SSL cert, unless ssl=any-cert
author Timo Sirainen <tss@iki.fi>
date Tue, 08 Nov 2011 23:40:54 +0200
parents fd5141e85076
children 1d23440ccb89
line wrap: on
line diff
--- a/src/login-common/ssl-proxy.h	Tue Nov 08 22:49:57 2011 +0200
+++ b/src/login-common/ssl-proxy.h	Tue Nov 08 23:40:54 2011 +0200
@@ -24,6 +24,7 @@
 void ssl_proxy_set_client(struct ssl_proxy *proxy, struct client *client);
 bool ssl_proxy_has_valid_client_cert(const struct ssl_proxy *proxy) ATTR_PURE;
 bool ssl_proxy_has_broken_client_cert(struct ssl_proxy *proxy);
+int ssl_proxy_cert_match_name(struct ssl_proxy *proxy, const char *verify_name);
 const char *ssl_proxy_get_peer_name(struct ssl_proxy *proxy);
 bool ssl_proxy_is_handshaked(const struct ssl_proxy *proxy) ATTR_PURE;
 const char *ssl_proxy_get_last_error(const struct ssl_proxy *proxy) ATTR_PURE;