check-subject-name ( host ssl-handle -- )

Vocabulary

io.sockets.secure.openssl

Inputs

host	an object
ssl-handle	an object

Outputs

None

Definition

USING: destructors io.sockets.secure kernel openssl.libssl ;

IN: io.sockets.secure.openssl

:: check-subject-name ( host ssl-handle -- )
    [
        ssl-handle get-ssl-peer-certificate
        [ &X509_free ] [ certificate-missing-error ] if*
        :> certificate host certificate certificate-matches? [
            host certificate subject-name
            subject-name-verify-error
        ] unless
    ] with-destructors ;