From 984962e246801214461e936bd99d60cce14d31d4 Mon Sep 17 00:00:00 2001 From: Oskar Eichler Date: Sun, 30 Aug 2026 01:22:19 +0200 Subject: [PATCH] Match single-label hostnames case-insensitively --- lib/openssl/ssl.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/openssl/ssl.rb b/lib/openssl/ssl.rb index dccc11a55..5fa64b5ef 100644 --- a/lib/openssl/ssl.rb +++ b/lib/openssl/ssl.rb @@ -289,7 +289,7 @@ def verify_hostname(hostname, san) # :nodoc: san_parts = san.downcase.split(".") # TODO: this behavior should probably be more strict - return san == hostname if san_parts.size < 2 + return san.casecmp?(hostname) if san_parts.size < 2 # Matching is case-insensitive. host_parts = hostname.downcase.split(".")