NGX-2040 - fix wildcard match on punycode/IDNA DNS names
authorZi Lin <zi@cloudflare.com>
Fri, 15 Jan 2016 19:31:11 +0000 (14:31 -0500)
committerViktor Dukhovni <openssl-users@dukhovni.org>
Fri, 15 Jan 2016 19:46:58 +0000 (14:46 -0500)
commit9f9a39267f6c752af0905d77062b00671b1b60c6
treebd0e5bd03b169946f4ef73e5048fc15283e7c1c9
parent87c00c93c4d47525f1838ea7c6c544122ff0ca1a
NGX-2040 - fix wildcard match on punycode/IDNA DNS names

- bugfix: should not treat '--' as invalid domain substring.
- '-' should not be the first letter of a domain

Signed-off-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/x509v3/v3_utl.c
test/v3nametest.c