On Mon, Jan 26, 2015 at 06:58:14PM +0100, pl wrote: > On 26/01/2015 16:16, Viktor Dukhovni wrote: > >On Mon, Jan 26, 2015 at 03:10:57PM +0000, Viktor Dukhovni wrote: > > > >>On Mon, Jan 26, 2015 at 01:07:54PM +0300, Serj wrote: > >> > >>>Thank you for answer. > >>> > >>>So, your recomendation is to use X509_check_host rather than code from wiki? > >>Yes, definitely, provided of course you're linking with OpenSSL > >>1.0.2 or later. > > I updated wiki accordingly, hoping to be more accurate. Thanks, could you also add the sample code fragment, without it the text is a bit obscure. -- Viktor.