From 6feeb3631adf0a068e4e24f3812500799c3b31e6 Mon Sep 17 00:00:00 2001 From: Benedikt Peetz Date: Fri, 2 Oct 2026 00:26:47 +0200 Subject: pkgs/fetchmail-common-name: Update patch, so that it applies again --- ...c-Correctly-check-the-common-name-even-if.patch | 40 ++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 pkgs/by-name/fe/fetchmail-common-name/patches/0001-fix-socket.c-Correctly-check-the-common-name-even-if.patch (limited to 'pkgs/by-name/fe/fetchmail-common-name/patches/0001-fix-socket.c-Correctly-check-the-common-name-even-if.patch') diff --git a/pkgs/by-name/fe/fetchmail-common-name/patches/0001-fix-socket.c-Correctly-check-the-common-name-even-if.patch b/pkgs/by-name/fe/fetchmail-common-name/patches/0001-fix-socket.c-Correctly-check-the-common-name-even-if.patch new file mode 100644 index 0000000..3c2d59e --- /dev/null +++ b/pkgs/by-name/fe/fetchmail-common-name/patches/0001-fix-socket.c-Correctly-check-the-common-name-even-if.patch @@ -0,0 +1,40 @@ +From 2fcc25966320748ab3cb9bbd709c4499a7e0bffc Mon Sep 17 00:00:00 2001 +From: Benedikt Peetz +Date: Thu, 1 Oct 2026 22:24:51 +0200 +Subject: [PATCH] fix(socket.c): Correctly check the common name, even if not + set (only SAN) + +--- + socket.c | 9 --------- + 1 file changed, 9 deletions(-) + +diff --git a/socket.c b/socket.c +index 3f6cc5b..d66ea72 100644 +--- a/socket.c ++++ b/socket.c +@@ -824,7 +824,6 @@ static int SSL_verify_callback(int ok_return, X509_STORE_CTX *ctx, const int str + _depth0ck = 1; + } + +- if ((i = X509_NAME_get_text_by_NID(subj, NID_commonName, buf, sizeof(buf))) != -1) { + if (_ssl_server_cname != NULL) { + char *p1 = buf; + char *p2 = _ssl_server_cname; +@@ -876,14 +875,6 @@ static int SSL_verify_callback(int ok_return, X509_STORE_CTX *ctx, const int str + report(stderr, GT_("Server name not set, could not verify certificate!\n")); + if (strict) return 0; + } +- } else { +- if (outlevel >= O_VERBOSE) +- report(stdout, GT_("Unknown Server CommonName\n")); +- if (ok_return && strict) { +- report(stderr, GT_("Server name not specified in certificate!\n")); +- return 0; +- } +- } + /* Print the finger print. Note that on errors, we might print it more than once + * normally; we kluge around that by using a global variable. */ + if (_check_fp == 1) { +-- +2.55.0 + -- cgit v1.3.1