summaryrefslogtreecommitdiff
path: root/src/lib/libtls/tls_client.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libtls/tls_client.c')
-rw-r--r--src/lib/libtls/tls_client.c10
1 files changed, 4 insertions, 6 deletions
diff --git a/src/lib/libtls/tls_client.c b/src/lib/libtls/tls_client.c
index c5849a6897..b851a6ecd0 100644
--- a/src/lib/libtls/tls_client.c
+++ b/src/lib/libtls/tls_client.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: tls_client.c,v 1.3 2014/12/07 15:00:32 bcook Exp $ */ 1/* $OpenBSD: tls_client.c,v 1.4 2014/12/07 15:48:02 bcook Exp $ */
2/* 2/*
3 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> 3 * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
4 * 4 *
@@ -209,11 +209,9 @@ tls_connect_fds(struct tls *ctx, int fd_read, int fd_write,
209 tls_set_error(ctx, "no server certificate"); 209 tls_set_error(ctx, "no server certificate");
210 goto err; 210 goto err;
211 } 211 }
212 tls_clear_error(ctx); 212 if (tls_check_hostname(cert, hostname) != 0) {
213 if (tls_check_hostname(ctx, cert, hostname) != 0) { 213 tls_set_error(ctx, "host `%s' not present in"
214 if (tls_error(ctx) == NULL) 214 " server certificate", hostname);
215 tls_set_error(ctx, "host `%s' not present in"
216 " server certificate", hostname);
217 goto err; 215 goto err;
218 } 216 }
219 } 217 }