NGX-2040 - fix wildcard match on punycode/IDNA DNS names
authorZi Lin <zi@cloudflare.com>
Fri, 15 Jan 2016 18:19:42 +0000 (13:19 -0500)
committerViktor Dukhovni <openssl-users@dukhovni.org>
Fri, 15 Jan 2016 19:48:17 +0000 (14:48 -0500)
commit15debc128ac13420a4eec9b4a66d72f1dfd69126
tree32f8e155496bee0d73f5d9711f530c05d4199472
parente254d12c439c3e50dfccc98e3414c3e1849792f5
NGX-2040 - fix wildcard match on punycode/IDNA DNS names

    - bugfix: should not treat '--' as invalid domain substring.
    - '-' should not be the first letter of a domain

Signed-off-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/x509v3/v3_utl.c
crypto/x509v3/v3nametest.c