diff options
| author | Michael Brown <mcb30@ipxe.org> | 2021-05-18 11:46:28 +0100 |
|---|---|---|
| committer | Michael Brown <mcb30@ipxe.org> | 2021-05-18 11:46:28 +0100 |
| commit | fc8bd4ba1a65db9d9091705f30fec19ded75530c (patch) | |
| tree | 0294c88753a96dcddf47f0ce34405430b4a1e7d7 /src/tests/x509_test.c | |
| parent | 661093054bcfae16d79404304d6f8318baf1231e (diff) | |
| download | ipxe-fc8bd4ba1a65db9d9091705f30fec19ded75530c.tar.gz | |
[x509] Use case-insensitive comparison for certificate names
DNS names are case-insensitive, and RFC 5280 (unlike RFC 3280)
mandates support for case-insensitive name comparison in X.509
certificates.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/tests/x509_test.c')
| -rw-r--r-- | src/tests/x509_test.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/tests/x509_test.c b/src/tests/x509_test.c index 256c3e85e..b6cba575c 100644 --- a/src/tests/x509_test.c +++ b/src/tests/x509_test.c @@ -1037,6 +1037,7 @@ static void x509_test_exec ( void ) { /* Check certificate names */ x509_check_name_ok ( &server_crt, "boot.test.ipxe.org" ); x509_check_name_ok ( &server_crt, "demo.test.ipxe.org" ); + x509_check_name_ok ( &server_crt, "demo.test.iPXE.org" ); x509_check_name_fail_ok ( &server_crt, "incorrect.test.ipxe.org" ); x509_check_name_ok ( &server_crt, "anything.alt.test.ipxe.org" ); x509_check_name_ok ( &server_crt, "wildcard.alt.test.ipxe.org" ); |