Bear Giles writes:
> This patch adds a check that the server certificate common name
> resolves to the other side of the socket.
gethostbyname2() is a GNU thing. AF_INET6 code needs to be #ifdef'd to
something because not every host handles IPv6. Avoid using fixed-size
arrays for names if possible.
--
Peter Eisentraut peter_e(at)gmx(dot)net