[svn] Check for the server's identity after the SSL handshake.

[wget] / src / http.c

diff --git a/src/http.c b/src/http.c
index d3fc1c3e8fe4bd5662784a277f77acd0ff13e5e7..b32c3ee455bd74d903fa1f762f2a6c3750a3fdd8 100644 (file)
--- a/src/http.c
+++ b/src/http.c
@@ -1516,7 +1516,7 @@ gethttp (struct url *u, struct http_stat *hs, int *dt, struct url *proxy)
 
       if (conn->scheme == SCHEME_HTTPS)
        {
-         if (!ssl_connect (sock))
+         if (!ssl_connect (sock) || !ssl_check_server_identity (sock, u->host))
            {
              fd_close (sock);
              return CONSSLERR;
@@ -2233,7 +2233,6 @@ File `%s' already there, will not retrieve.\n"), *hstat.local_file);
          return err;
        case CONSSLERR:
          /* Another fatal error.  */
-         logputs (LOG_VERBOSE, "\n");
          logprintf (LOG_NOTQUIET, _("Unable to establish SSL connection.\n"));
          free_hstat (&hstat);
          xfree_null (dummy);