diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2015-02-20 11:29:02 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2015-03-09 15:40:06 +0100 |
| commit | 18597950fa305666e9040099b7bcd67dcc95da7f (patch) | |
| tree | 822eb357693613db310505df9f7c7960c4a5f66b /src/libcharon/plugins/kernel_iph | |
| parent | e5009fbb66d6856d4cae248f5a77b6651d967b58 (diff) | |
| download | strongswan-18597950fa305666e9040099b7bcd67dcc95da7f.tar.bz2 strongswan-18597950fa305666e9040099b7bcd67dcc95da7f.tar.xz | |
tls-peer: Make sure to use the right trusted public key for peer
In case a CA certificate uses the same subject DN as the server the
previous code could end up trying to verify the server's signature with
the CA certificate's public key. By comparing the certificate with the
one sent by the peer we make sure to use the right one.
Fixes #849.
Diffstat (limited to 'src/libcharon/plugins/kernel_iph')
0 files changed, 0 insertions, 0 deletions