Branch: Tag:

2015-06-10

2015-06-10 15:56:58 by Henrik Grubbström (Grubba) <grubba@grubba.org>

SSL [SNI]: Match against specific globs before the fallback glob.

Fixes glob cert matching when there also are fallback ("*") certificates.

698:    if( cert_chains_domain[domain] )    return cert_chains_domain[domain];    -  // Return first matching chain. +  // Return first matching chain that isn't a fallback certificate. +  string best;    foreach(cert_chains_domain; string g; array(CertificatePair) chains) -  if( glob(g, domain) ) +  if( glob(g, domain) && (g != "*") )    return chains;    }