Function tlsValidateCertificateName

src/tls.cpp:655–668

}

bool tlsValidateCertificateName(tls_connection* conn){
    const char* cn = "";
    if (tlsCheckCertificateAgainstAllowlist(conn, g_pserver->tls_allowlist, &cn)) {
        return true;
    } else {
        /* If neither the CN nor the SANs match, update the SSL error and return false */
        conn->c.last_errno = 0;
        if (conn->ssl_error) zfree(conn->ssl_error);
        size_t bufsize = 512;
        conn->ssl_error = (char*)zmalloc(bufsize);
        snprintf(conn->ssl_error, bufsize, "Client CN (%s) and SANs not found in allowlist.", cn);
        return false;
    }
}

static connection *createTLSConnection(int client_side) {
    SSL_CTX *ctx = redis_tls_ctx;