When using a proxy for an https connection, validate the cert hostname
authorjca <jca@openbsd.org>
Mon, 25 Aug 2014 11:33:55 +0000 (11:33 +0000)
committerjca <jca@openbsd.org>
Mon, 25 Aug 2014 11:33:55 +0000 (11:33 +0000)
commitdde23187f24fbf8d3cf1e477f34a8ea75543b6be
tree4bb5fec1bbf6dd1fc739a8772c2172361d0b0f8e
parent996733b2a9e3bb599d3a1b25328fe566e09c44ed
When using a proxy for an https connection, validate the cert hostname
against the target hostname, not the proxy hostname.  Issue reported by
dlg@, fix by Alex Wilson on tech@, tweaks by me.
No reply from tech@
usr.bin/ftp/fetch.c