From e2b5ea14d25dbbb62a1e827803e67c30df79c6a1 Mon Sep 17 00:00:00 2001
From: Jaakko Keränen <jaakko.keranen@iki.fi>
Date: Tue, 1 Sep 2020 19:01:55 +0300
Subject: Proxy improvements

Verify domain name against the request and now against the original URL.

HTTP proxy overrides the default handling of HTTP URLs.
---
 src/gmrequest.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/gmrequest.c')

diff --git a/src/gmrequest.c b/src/gmrequest.c
index 24732650..137e8303 100644
--- a/src/gmrequest.c
+++ b/src/gmrequest.c
@@ -194,7 +194,7 @@ static void checkServerCertificate_GmRequest_(iGmRequest *d) {
     const iTlsCertificate *cert = serverCertificate_TlsRequest(d->req);
     d->resp.certFlags = 0;
     if (cert) {
-        const iRangecc domain = urlHost_String(&d->url);
+        const iRangecc domain = range_String(hostName_Address(address_TlsRequest(d->req)));
         d->resp.certFlags |= available_GmCertFlag;
         if (!isExpired_TlsCertificate(cert)) {
             d->resp.certFlags |= timeVerified_GmCertFlag;
-- 
cgit v1.2.3