mirror of
https://github.com/webmin/webmin.git
synced 2026-05-14 18:50:29 +01:00
Harden check for valid SSL SNI hostname
This commit is contained in:
@@ -2594,7 +2594,8 @@ if (&get_type($full) eq "internal/cgi" && $validated != 4) {
|
||||
if ($use_ssl) {
|
||||
$ENV{"SSL_CN"} = $ssl_cn;
|
||||
$ENV{"SSL_CN_CERT"} =
|
||||
&ssl_hostname_match($header{'host'}, $ssl_alts);
|
||||
&ssl_hostname_match($header{'host'}, $ssl_alts) &&
|
||||
&ssl_hostname_match($ssl_cn, $ssl_alts);
|
||||
}
|
||||
$ENV{"MINISERV_PID"} = $miniserv_main_pid;
|
||||
if ($use_ssl) {
|
||||
|
||||
Reference in New Issue
Block a user