oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

lib/krb5: remove dead code from pk_verify_host()

Browse Source 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Stefan Metzmacher
2022-03-03 17:28:24 +01:00
committed by Jeffrey Altman
parent 4baf76220c
commit 8f9c2d115e
1 changed files with 0 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
lib/krb5/pkinit.c
View File

@@ -1017,7 +1017,6 @@ pk_verify_host(krb5_context context,
struct krb5_pk_init_ctx_data *ctx, struct krb5_pk_init_ctx_data *ctx,
struct krb5_pk_cert *host) struct krb5_pk_cert *host)
{ {
const krb5_krbhst_info *hi = NULL;
krb5_error_code ret = 0; krb5_error_code ret = 0;
if (ctx->require_eku) { if (ctx->require_eku) {
@@ -1092,18 +1091,6 @@ pk_verify_host(krb5_context context,
if (ret) if (ret)
return ret; return ret;
if (hi) {
ret = hx509_verify_hostname(context->hx509ctx, host->cert,
ctx->require_hostname_match,
HX509_HN_HOSTNAME,
hi->hostname,
hi->ai->ai_addr, hi->ai->ai_addrlen);
if (ret)
krb5_set_error_message(context, ret,
N_("Address mismatch in "
"the KDC certificate", ""));
}
return ret; return ret;
} }