add an RFC 2849 check... but behind #if 0 as I'm now thinking this

is not appropriate.

diff --git a/libraries/libldap/tls.c b/libraries/libldap/tls.c
index 3795402426959e19798b2731ab3cfa74af04eda8..19ad523acf3c45c5636b001f8ebdf8d196ceee8a 100644 (file)
--- a/libraries/libldap/tls.c
+++ b/libraries/libldap/tls.c
@@ -940,6 +940,15 @@ ldap_pvt_tls_check_hostname( void *s, const char *name_in )
                                        {
                                                break;
                                        }
+
+#if 0
+                                       /* Is this a RFC 2549 style wildcard match? */
+                                       if ((*sn == '.') && domain && (len2 == sl) &&
+                                               !strncasecmp(domain, sn, len2))
+                                       {
+                                               break;
+                                       }
+#endif
                                }
                        }