mbedtls: x509 crt verify SAN iPAddress
authorGlenn Strauss <gstrauss@gluelogic.com>
Fri, 28 Oct 2022 02:26:48 +0000 (22:26 -0400)
committerHauke Mehrtens <hauke@hauke-m.de>
Fri, 3 Feb 2023 10:27:58 +0000 (11:27 +0100)
commit2a691fc7f2bac365d147beb593be4331f11c5dca
treed3a37220176716b485ce24818f8a1697153ca439
parent50324b949b91cfb70ced3869b09b895e45a5ae37
mbedtls: x509 crt verify SAN iPAddress

backport from
X509 crt verify SAN iPAddress
https://github.com/Mbed-TLS/mbedtls/pull/6475

addresses
curl built with mbedtls fails on https://1.1.1.1/ (IP address in SubjectAltName)
https://github.com/Mbed-TLS/mbedtls/issues/6473

filed for
mbedTLS: BADCERT_CN_MISMATCH on https://1.1.1.1 with curl+mbedtls
https://github.com/openwrt/packages/issues/19677

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
package/libs/mbedtls/Makefile
package/libs/mbedtls/patches/100-x509-crt-verify-SAN-iPAddress.patch [new file with mode: 0644]