res_pjsip: Don't allow a leading period when wildcard matching

The reference identifier (what the client provides - in this case a
hostname) must start with a domain label, not a `.`.

The current implementation will match `.seanbright.com` against
`*.seanbright.com` which is incorrect.
This commit is contained in:
Sean Bright
2026-05-26 14:05:48 +00:00
parent 3f0ddb0f3a
commit ca7709c2f6

View File

@@ -212,7 +212,7 @@ static int verify_cert_name(const pj_str_t *local, const pj_str_t *remote)
}
p = pj_strchr(local, '.');
if (!p) {
if (!p || p == pj_strbuf(local)) {
return 0;
}