Download
Browse source Changelog
Documentation
Project   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Security   Version numbers   Vulnerabilities curl tool   man page   Tutorial   HTTP scripting Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users curl-announce curl-commits Etiquette
Development
Autobuilds Code Style Contribute Internals Release Notes Release Procedure Roadmap Run Tests Security Specifications Test curl
News
Changelog Release table
curl / Mailing Lists / curl-library / Single Mail

curl-library

Re: CURLOPT_SSL_VERIFYHOST and Wildcard Certificates

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Thu, 12 Jan 2017 23:57:18 +0100 (CET)

On Thu, 12 Jan 2017, Paul D Rotter wrote:

> If I try to connect to https://test.domain.com should a certificate for
> *.domain.com pass this verification or no?

It should, yes.

The detailed rules are in RFC2818 section 3.1:

  https://tools.ietf.org/html/rfc2818#section-3.1 

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:  https://curl.haxx.se/mail/etiquette.html
Received on 2017-01-12