[SCM] GNU gnutls branch, gnutls_2_12_x, updated. gnutls_2_12_2-27-gb61dcbb

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=b61dcbb934a8616110047534b2e24dae07e3c487

The branch, gnutls_2_12_x has been updated
       via  b61dcbb934a8616110047534b2e24dae07e3c487 (commit)
       via  f7f7eb25e59fe18796e70e3802ba90f21020c5f5 (commit)
      from  f52e1be8325170a4752986197037e0ad9735572d (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b61dcbb934a8616110047534b2e24dae07e3c487
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Apr 21 18:53:40 2011 +0200

    document fixes.

commit f7f7eb25e59fe18796e70e3802ba90f21020c5f5
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Thu Apr 21 18:51:56 2011 +0200

    gnutls_x509_crt_check_hostname() will never compare against IPaddress.
    (previous comparison was flawed)

-----------------------------------------------------------------------

Summary of changes:
 NEWS                        |    2 ++
 lib/x509/rfc2818_hostname.c |   10 ----------
 2 files changed, 2 insertions(+), 10 deletions(-)

diff --git a/NEWS b/NEWS
index 73e95fb..5d51318 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,8 @@ See the end for copying conditions.
 
 * Version 2.12.3 (unreleased)
 
+* libgnutls: Several minor bugfixes.
+
 * libgnutls: Restored HMAC-MD5 for compatibility. Although considered 
 weak, several sites require it for connection. It is enabled for
 "NORMAL" and "PERFORMANCE" priority strings.
diff --git a/lib/x509/rfc2818_hostname.c b/lib/x509/rfc2818_hostname.c
index 676be34..46606fd 100644
--- a/lib/x509/rfc2818_hostname.c
+++ b/lib/x509/rfc2818_hostname.c
@@ -80,16 +80,6 @@ gnutls_x509_crt_check_hostname (gnutls_x509_crt_t cert, 
const char *hostname)
               return 1;
             }
         }
-      else if (ret == GNUTLS_SAN_IPADDRESS)
-        {
-          found_dnsname = 1;    /* RFC 2818 is unclear whether the CN
-                                   should be compared for IP addresses
-                                   too, but we won't do it.  */
-          if (_gnutls_hostname_compare (dnsname, dnsnamesize, hostname))
-            {
-              return 1;
-            }
-        }
     }
 
   if (!found_dnsname)


hooks/post-receive
-- 
GNU gnutls