[dovecot/core] d18522: lib-ssl-iostream: Split host to connected_host and...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/dovecot/core
  Commit: d185226aa3dc88a9ee9f16b4c8b2e38000ac8b96
      https://github.com/dovecot/core/commit/d185226aa3dc88a9ee9f16b4c8b2e38000ac8b96
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2017-11-01 (Wed, 01 Nov 2017)

  Changed paths:
    M src/lib-ssl-iostream/iostream-openssl-context.c
    M src/lib-ssl-iostream/iostream-openssl.c
    M src/lib-ssl-iostream/iostream-openssl.h

  Log Message:
  -----------
  lib-ssl-iostream: Split host to connected_host and sni_host

Using the same variable for both was causing confusion.


  Commit: 4cc68747aa932fb9a98f1504b9d874f5cfbf0dec
      https://github.com/dovecot/core/commit/4cc68747aa932fb9a98f1504b9d874f5cfbf0dec
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2017-11-01 (Wed, 01 Nov 2017)

  Changed paths:
    M src/lib-ssl-iostream/iostream-openssl.c

  Log Message:
  -----------
  lib-ssl-iostream: Fix checking cert validity when handshake callback isn't used


  Commit: 4584a00276941db3f64c4db1a1bed91fe107af81
      https://github.com/dovecot/core/commit/4584a00276941db3f64c4db1a1bed91fe107af81
  Author: Timo Sirainen <timo.sirainen at dovecot.fi>
  Date:   2017-11-01 (Wed, 01 Nov 2017)

  Changed paths:
    M src/lib-ssl-iostream/iostream-openssl.c
    M src/lib-ssl-iostream/iostream-ssl.h

  Log Message:
  -----------
  lib-ssl-iostream: Verify SSL server's hostname against cert if it's non-NULL

The hostname verification was skipped when handshake-callback wasn't used.
All of the existing code used the callback though, so this doesn't fix
any bugs.


Compare: https://github.com/dovecot/core/compare/9a84b90d894a...4584a0027694