diff options
| author |   jsing <jsing@openbsd.org> | 2015-02-11 06:46:33 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2015-02-11 06:46:33 +0000 |
| commit | 0ca7b9df22835af5b39c6f6a3e6f720f452c1f39 (patch) | |
| tree | fb576fc5877e7d60115a170c402a782d8dace1e9 /lib/libtls/tls_internal.h | |
| parent | dont need lockmgr for pmap things, so we dont need sys/lock.h (diff) | |
| download | wireguard-openbsd-0ca7b9df22835af5b39c6f6a3e6f720f452c1f39.tar.xz wireguard-openbsd-0ca7b9df22835af5b39c6f6a3e6f720f452c1f39.zip | |
Be consistent with naming - only use "host" and "hostname" when referring
to an actual host and use "servername" when referring to the name of the
TLS server that we expect to be indentified in the server certificate.
Likewise, rename verify_host to verify_name and use the term "name"
throughout the verification code (rather than host or hostname).
Requested by and ok tedu@
Diffstat (limited to 'lib/libtls/tls_internal.h')
| -rw-r--r-- | lib/libtls/tls_internal.h | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/lib/libtls/tls_internal.h b/lib/libtls/tls_internal.h index f0feddcf5b9..78e6b1fe2bf 100644 --- a/lib/libtls/tls_internal.h +++ b/lib/libtls/tls_internal.h @@ -1,4 +1,4 @@ -/* $OpenBSD: tls_internal.h,v 1.9 2015/02/07 09:50:09 jsing Exp $ */ +/* $OpenBSD: tls_internal.h,v 1.10 2015/02/11 06:46:33 jsing Exp $ */ /* * Copyright (c) 2014 Jeremie Courreges-Anglas <jca@openbsd.org> * Copyright (c) 2014 Joel Sing <jsing@openbsd.org> @@ -41,8 +41,8 @@ struct tls_config { size_t key_len; uint32_t protocols; int verify_cert; - int verify_host; int verify_depth; + int verify_name; }; #define TLS_CLIENT (1 << 0) @@ -66,7 +66,7 @@ struct tls { struct tls *tls_new(void); struct tls *tls_server_conn(struct tls *ctx); -int tls_check_hostname(struct tls *ctx, X509 *cert, const char *host); +int tls_check_servername(struct tls *ctx, X509 *cert, const char *servername); int tls_configure_keypair(struct tls *ctx); int tls_configure_server(struct tls *ctx); int tls_configure_ssl(struct tls *ctx); |