On 26/01/2015 16:16, Viktor Dukhovni wrote: > On Mon, Jan 26, 2015 at 03:10:57PM +0000, Viktor Dukhovni wrote: > >> On Mon, Jan 26, 2015 at 01:07:54PM +0300, Serj wrote: >> >>> Thank you for answer. >>> >>> So, your recomendation is to use X509_check_host rather than code from wiki? >> Yes, definitely, provided of course you're linking with OpenSSL >> 1.0.2 or later. I updated wiki accordingly, hoping to be more accurate.