Update tls.py

SAN DNS entry is not case sensitive, so ignore case of hostname.
denisenkom · Jul 3, 2024 · 5ee42a2 · 5ee42a2
1 parent 585547b
commit 5ee42a2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/pytds/tls.py b/src/pytds/tls.py
@@ -134,7 +134,7 @@ def validate_host(cert, name: bytes) -> bool:
         ext = cert.get_extension(i)
         if ext.get_short_name() == b"subjectAltName":
             s = str(ext)
-            if is_san_matching(s, s_name):
+            if is_san_matching(s.lower(), s_name.lower()):
                 return True
 
     # TODO check if wildcard is needed in CN as well