Update tls.py

SAN DNS entry is not case sensitive, so ignore case of hostname. Use uppercase to preserve DNS: prefix.
denisenkom · Jul 3, 2024 · 09e2f69 · 09e2f69
1 parent 585547b
commit 09e2f69
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/pytds/tls.py b/src/pytds/tls.py
@@ -134,7 +134,7 @@ def validate_host(cert, name: bytes) -> bool:
         ext = cert.get_extension(i)
         if ext.get_short_name() == b"subjectAltName":
             s = str(ext)
-            if is_san_matching(s, s_name):
+            if is_san_matching(s.upper(), s_name.upper()):
                 return True
 
     # TODO check if wildcard is needed in CN as well