//
|
// ssl/impl/host_name_verification.ipp
|
// ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
//
|
// Copyright (c) 2003-2020 Christopher M. Kohlhoff (chris at kohlhoff dot com)
|
//
|
// Distributed under the Boost Software License, Version 1.0. (See accompanying
|
// file LICENSE_1_0.txt or copy at http://www.boost.org/LICENSE_1_0.txt)
|
//
|
|
#ifndef BOOST_ASIO_SSL_IMPL_HOST_NAME_VERIFICATION_IPP
|
#define BOOST_ASIO_SSL_IMPL_HOST_NAME_VERIFICATION_IPP
|
|
#if defined(_MSC_VER) && (_MSC_VER >= 1200)
|
# pragma once
|
#endif // defined(_MSC_VER) && (_MSC_VER >= 1200)
|
|
#include <boost/asio/detail/config.hpp>
|
|
#include <cctype>
|
#include <cstring>
|
#include <boost/asio/ip/address.hpp>
|
#include <boost/asio/ssl/host_name_verification.hpp>
|
#include <boost/asio/ssl/detail/openssl_types.hpp>
|
|
#include <boost/asio/detail/push_options.hpp>
|
|
namespace boost {
|
namespace asio {
|
namespace ssl {
|
|
bool host_name_verification::operator()(
|
bool preverified, verify_context& ctx) const
|
{
|
using namespace std; // For memcmp.
|
|
// Don't bother looking at certificates that have failed pre-verification.
|
if (!preverified)
|
return false;
|
|
// We're only interested in checking the certificate at the end of the chain.
|
int depth = X509_STORE_CTX_get_error_depth(ctx.native_handle());
|
if (depth > 0)
|
return true;
|
|
// Try converting the host name to an address. If it is an address then we
|
// need to look for an IP address in the certificate rather than a host name.
|
boost::system::error_code ec;
|
ip::address address = ip::make_address(host_, ec);
|
const bool is_address = !ec;
|
(void)address;
|
|
X509* cert = X509_STORE_CTX_get_current_cert(ctx.native_handle());
|
|
if (is_address)
|
{
|
return X509_check_ip_asc(cert, host_.c_str(), 0) == 1;
|
}
|
else
|
{
|
char* peername = 0;
|
const int result = X509_check_host(cert,
|
host_.c_str(), host_.size(), 0, &peername);
|
OPENSSL_free(peername);
|
return result == 1;
|
}
|
}
|
|
} // namespace ssl
|
} // namespace asio
|
} // namespace boost
|
|
#include <boost/asio/detail/pop_options.hpp>
|
|
#endif // BOOST_ASIO_SSL_IMPL_HOST_NAME_VERIFICATION_IPP
|
