curl/lib/vtls
Stefan Eissing e87751d69a vtls: fix tls proxy peer verification
- When verifying a proxy certificate for an ip address, use the correct
  ip family.

Prior to this change the "connection" ip family was used, which was not
necessarily the same.

Reported-by: HsiehYuho@users.noreply.github.com

Fixes https://github.com/curl/curl/issues/12831
Closes https://github.com/curl/curl/pull/12931
2024-02-16 18:00:21 -05:00
..
bearssl.c vtls: fix tls proxy peer verification 2024-02-16 18:00:21 -05:00
bearssl.h
gtls.c gnutls: fix build with --disable-verbose 2023-12-16 22:06:21 +01:00
gtls.h
hostcheck.c
hostcheck.h
keylog.c
keylog.h
mbedtls_threadlock.c
mbedtls_threadlock.h
mbedtls.c mbedtls: use mbedtls_ssl_conf_{min|max}_tls_version 2024-02-10 14:21:50 +01:00
mbedtls.h
openssl.c vtls: fix tls proxy peer verification 2024-02-16 18:00:21 -05:00
openssl.h vtls: consistently use typedef names for OpenSSL structs 2023-12-01 23:00:43 +01:00
rustls.c build: enable missing OpenSSF-recommended warnings, with fixes 2023-12-16 13:12:37 +00:00
rustls.h
schannel_int.h
schannel_verify.c build: enable missing OpenSSF-recommended warnings, with fixes 2023-12-16 13:12:37 +00:00
schannel.c vtls: fix tls proxy peer verification 2024-02-16 18:00:21 -05:00
schannel.h
sectransp.c vtls: fix tls proxy peer verification 2024-02-16 18:00:21 -05:00
sectransp.h
vtls_int.h openssl: when a session-ID is reused, skip OCSP stapling 2023-11-28 22:59:10 +01:00
vtls.c vtls: fix tls proxy peer verification 2024-02-16 18:00:21 -05:00
vtls.h vtls: remove the Curl_cft_ssl_proxy object if CURL_DISABLE_PROXY 2023-12-07 09:31:05 +01:00
wolfssl.c wolfssl: load certificate *chain* for PEM client certs 2024-01-06 11:24:11 +01:00
wolfssl.h
x509asn1.c x509asn1: switch from malloc to dynbuf 2024-01-27 12:27:35 +01:00
x509asn1.h