diff options
| author | Ingela Anderton Andin <[email protected]> | 2017-10-06 17:24:16 +0200 |
|---|---|---|
| committer | Ingela Anderton Andin <[email protected]> | 2017-10-13 11:35:39 +0200 |
| commit | 0bb96516ce308b6fb837696338b492d3c9a9f429 (patch) | |
| tree | 4daf04a9d86159bf803db457eda16c4199992afa /lib/ssl/src/ssl.erl | |
| parent | 4f4bf872831b12cac8913e8a62e35725d0173b0d (diff) | |
| download | otp-0bb96516ce308b6fb837696338b492d3c9a9f429.tar.gz otp-0bb96516ce308b6fb837696338b492d3c9a9f429.tar.bz2 otp-0bb96516ce308b6fb837696338b492d3c9a9f429.zip | |
ssl: Extend hostname check to fallback to checking IP-address
If no SNI is available and the hostname is an IP-address also check
for IP-address match. This check is not as good as a DNS hostname check
and certificates using IP-address are not recommended.
Diffstat (limited to 'lib/ssl/src/ssl.erl')
| -rw-r--r-- | lib/ssl/src/ssl.erl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/ssl/src/ssl.erl b/lib/ssl/src/ssl.erl index 4e592c02ec..054e3b7ae3 100644 --- a/lib/ssl/src/ssl.erl +++ b/lib/ssl/src/ssl.erl @@ -1003,7 +1003,7 @@ validate_option(server_name_indication = Opt, Value) when is_list(Value) -> validate_option(server_name_indication, undefined = Value) -> Value; validate_option(server_name_indication, disable) -> - undefined; + disable; validate_option(sni_hosts, []) -> []; |