commit 4009d8f377e6e5a5455e4602914a044f69ca2ad6
author Teppo Järvelin <teppo.jarvelin@arm.com> Mon Aug 19 14:48:09 2019 +0300
committer Teppo Järvelin <teppo.jarvelin@arm.com> Tue Aug 27 10:47:08 2019 +0300
tree f27087ad245f40fb02c6d4d7da7ff1a8efce13ae
parent f0f01e1f0aa6984aff2deb5991e6fab3b6451cd4

Make function mbedtls_ssl_set_hostname(...) as optional

Now function mbedtls_ssl_set_hostname is compile-time configurable
in config.h with define MBEDTLS_X509_REMOVE_HOSTNAME_VERIFICATION.
This affects to many x509 API's. See config.h for details.

library/x509.c

diff --git a/library/x509.c b/library/x509.c
index a6c6584..19cc64b 100644
--- a/library/x509.c
+++ b/library/x509.c
@@ -1250,7 +1250,11 @@
     if( verbose != 0 )
         mbedtls_printf( "passed\n  X.509 signature verify: ");
 
-    ret = mbedtls_x509_crt_verify( &clicert, &cacert, NULL, NULL, &flags, NULL, NULL );
+    ret = mbedtls_x509_crt_verify( &clicert, &cacert, NULL,
+#if !defined(MBEDTLS_X509_REMOVE_HOSTNAME_VERIFICATION)
+    NULL,
+#endif /* !MBEDTLS_X509_REMOVE_HOSTNAME_VERIFICATION */
+    &flags, NULL, NULL );
     if( ret != 0 )
     {
         if( verbose != 0 )