openssl/ssl
David Woodhouse 892a9e4c99 Disallow setting more than one IP address with SSL_add1_host()
The X509_VERIFY_PARAM can only take a single IP address, although it can
have multiple hostnames. When SSL_add1_host() is given an IP address,
don't accept it if there is already one configured.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/9201)
2020-08-03 17:15:36 +02:00
..
record Update copyright year 2020-07-16 14:47:04 +02:00
statem Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
bio_ssl.c Update copyright year 2020-05-15 14:09:49 +01:00
build.info Add provider support for TLS CBC padding and MAC removal 2020-07-06 09:26:09 +01:00
d1_lib.c
d1_msg.c
d1_srtp.c Update copyright year 2020-05-15 14:09:49 +01:00
methods.c
pqueue.c
s3_cbc.c unify spelling of serialize 2020-07-30 20:15:22 +10:00
s3_enc.c Convert SSLv3 handling to use provider side CBC/MAC removal 2020-07-06 09:26:09 +01:00
s3_lib.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
s3_msg.c
ssl_asn1.c
ssl_cert_table.h
ssl_cert.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ssl_ciph.c deprecate engines in SSL 2020-07-16 09:12:27 +02:00
ssl_conf.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ssl_err.c Provider a better error message if we fail to copy parameters 2020-06-19 10:19:32 +01:00
ssl_init.c Providerized libssl fallout: cleanup init 2020-07-11 15:13:09 -07:00
ssl_lib.c Disallow setting more than one IP address with SSL_add1_host() 2020-08-03 17:15:36 +02:00
ssl_local.h Convert SSLv3 handling to use provider side CBC/MAC removal 2020-07-06 09:26:09 +01:00
ssl_mcnf.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ssl_rsa.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ssl_sess.c deprecate engines in SSL 2020-07-16 09:12:27 +02:00
ssl_stat.c
ssl_txt.c Update copyright year 2020-04-23 13:55:52 +01:00
ssl_utst.c
t1_enc.c Revert "kdf: make function naming consistent." 2020-07-16 14:21:07 +02:00
t1_lib.c Revert "The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_*" 2020-07-16 14:21:07 +02:00
t1_trce.c t1_trce: Fix remaining places where the 24 bit shift overflow happens 2020-05-20 17:31:56 +02:00
tls13_enc.c Revert "kdf: make function naming consistent." 2020-07-16 14:21:07 +02:00
tls_srp.c Update copyright year 2020-04-23 13:55:52 +01:00