diff options
Diffstat (limited to 'src/lib/libtls/tls_client.c')
-rw-r--r-- | src/lib/libtls/tls_client.c | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/src/lib/libtls/tls_client.c b/src/lib/libtls/tls_client.c index c5849a6897..b851a6ecd0 100644 --- a/src/lib/libtls/tls_client.c +++ b/src/lib/libtls/tls_client.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: tls_client.c,v 1.3 2014/12/07 15:00:32 bcook Exp $ */ | 1 | /* $OpenBSD: tls_client.c,v 1.4 2014/12/07 15:48:02 bcook Exp $ */ |
2 | /* | 2 | /* |
3 | * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> | 3 | * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> |
4 | * | 4 | * |
@@ -209,11 +209,9 @@ tls_connect_fds(struct tls *ctx, int fd_read, int fd_write, | |||
209 | tls_set_error(ctx, "no server certificate"); | 209 | tls_set_error(ctx, "no server certificate"); |
210 | goto err; | 210 | goto err; |
211 | } | 211 | } |
212 | tls_clear_error(ctx); | 212 | if (tls_check_hostname(cert, hostname) != 0) { |
213 | if (tls_check_hostname(ctx, cert, hostname) != 0) { | 213 | tls_set_error(ctx, "host `%s' not present in" |
214 | if (tls_error(ctx) == NULL) | 214 | " server certificate", hostname); |
215 | tls_set_error(ctx, "host `%s' not present in" | ||
216 | " server certificate", hostname); | ||
217 | goto err; | 215 | goto err; |
218 | } | 216 | } |
219 | } | 217 | } |