Kazuki Yamaguchi f272b3e281 [ruby/openssl] ssl: fix NoMethodError on SAN dNSName with an empty label ...

Handle the empty label as a literal string.

OpenSSL::SSL::SSLSocket#post_connection_check can raise NoMethodError
when the server certificate contains a malformed subjectAltName
extension with a dNSName that starts with ".", such as ".example.com".

Reported by 4l1ve on HackerOne.

https://github.com/ruby/openssl/commit/1fb29e7ef5

2026-10-24 09:23:48 +00:00

..

openssl

[ruby/openssl] ssl: fix NoMethodError on SAN dNSName with an empty label

2026-10-24 09:23:48 +00:00

openssl.rb

[ruby/openssl] ossl.c: improve docs for constants and methods under ::OpenSSL

2025-12-15 09:09:49 +00:00