Strengthen X509_STORE_CTX_print_verify_cb() to print expected host etc.
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Thu, 30 Apr 2020 17:31:07 +0000 (19:31 +0200)
committerDr. David von Oheimb <David.von.Oheimb@siemens.com>
Tue, 5 May 2020 08:27:28 +0000 (10:27 +0200)
commit278260bfa238aefef5a1abe2043d2f812c3a4bd5
treeec5b676ad3866755d0b2508b9e47cda8b26401b9
parente307e616f25a6b7b0f343fc1e62a35b2cba888f3
Strengthen X509_STORE_CTX_print_verify_cb() to print expected host etc.

Add X509_VERIFY_PARAM_get0_host(), X509_VERIFY_PARAM_get0_email(),
and X509_VERIFY_PARAM_get1_ip_asc() to support this,
as well as the internal helper function ipaddr_to_asc(), which
is used also for simplifying other IP address output functions.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/11693)
crypto/x509/t_x509.c
crypto/x509/v3_addr.c
crypto/x509/v3_alt.c
crypto/x509/v3_ncons.c
crypto/x509/v3_utl.c
crypto/x509/x509_vpm.c
doc/man3/X509_VERIFY_PARAM_set_flags.pod
include/internal/cryptlib.h
include/openssl/x509_vfy.h
util/libcrypto.num