On Sun, 17 Feb 2019, Nicolas Grekas wrote:

> In my app, I implemented the trivial logic, but doing the alt names
> validation feels like risky: I'm not sure it's easy to implement properly,
> while libcurl already embeds the logic when opening the connection.
>
> I'd be really great if libcurl could do the validation by default!

Thanks for all the details. I've filed an issue for this bug:
https://github.com/curl/curl/issues/3577

I'll work on a fix.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html