h2o / picotls

TLS 1.3 implementation in C (master supports RFC8446 as well as draft-26, -27, -28)
527 stars 140 forks source link

Allow client to verify certificate with NULL server name #520

Closed davidk-ad8 closed 3 months ago

davidk-ad8 commented 3 months ago

Currently the client always verifies the server name against the server's cert. This change would allow the client to skip the name verification (as the server does) if a NULL server name is provided.

This would primarily be to allow the use of servers/clients on a local network without hostnames. It would also be the first step to resolving this Picoquic issue: https://github.com/private-octopus/picoquic/issues/1184