Faizur Rahman 29e40a6d8a schannel: Make CURLOPT_CAINFO work better on Windows 7
- Support hostname verification via alternative names (SAN) in the
  peer certificate when CURLOPT_CAINFO is used in Windows 7 and earlier.

CERT_NAME_SEARCH_ALL_NAMES_FLAG doesn't exist before Windows 8. As a
result CertGetNameString doesn't quite work on those versions of
Windows. This change provides an alternative solution for
CertGetNameString by iterating through CERT_ALT_NAME_INFO for earlier
versions of Windows.

Prior to this change many certificates failed the hostname validation
when CURLOPT_CAINFO was used in Windows 7 and earlier. Most certificates
now represent multiple hostnames and rely on the alternative names field
exclusively to represent their hostnames.

Reported-by: Jeroen Ooms

Fixes https://github.com/curl/curl/issues/3711
Closes https://github.com/curl/curl/pull/4761
2020-01-11 18:23:46 -05:00
..
2019-03-15 10:22:42 +01:00
2019-03-15 10:22:42 +01:00
2019-12-13 13:01:01 +01:00
2019-03-01 17:30:34 +01:00
2019-11-08 14:51:42 +01:00
2019-11-16 16:15:03 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2020-01-06 10:12:02 +01:00
2019-11-08 14:51:42 +01:00
2019-05-13 08:17:09 +02:00
2019-05-13 08:17:09 +02:00
2019-09-27 08:29:54 +02:00
2019-11-08 14:51:42 +01:00
2019-03-05 08:01:50 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2020-01-11 18:10:47 -05:00
2019-05-20 08:51:11 +02:00
2019-05-20 08:51:11 +02:00
2019-09-18 08:08:41 +02:00
2019-05-17 23:24:34 +02:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-07-11 02:27:04 -04:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-10-03 22:54:26 +02:00