Make SSL_set1_host() and SSL_add1_host() take IP addresses
authorDavid Woodhouse <dwmw2@infradead.org>
Mon, 14 Oct 2019 09:46:07 +0000 (10:46 +0100)
committerTomas Mraz <tmraz@fedoraproject.org>
Mon, 3 Aug 2020 15:15:35 +0000 (17:15 +0200)
commitc832840e899091948bb7f5e9af63f929e6a18f95
tree2cf3eeddafae44eccbac59934bfb0962d0a58ff7
parenta677190779705d243cca88ae04f2105dee52672d
Make SSL_set1_host() and SSL_add1_host() take IP addresses

There is a slight mismatch here because X509_VERIFY_PARAM copes only
with a single IP address, and doesn't let it be cleared once it's set.
But this fixes up the major use case, making things easier for users to
get it right.

The sconnect demo now works for Legacy IP literals; for IPv6 it needs to
fix up the way it tries to split the host:port string, which will happen
in a subsequent patch.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/9201)
ssl/ssl_lib.c