commit 9722c331ba0120dcfec18812a4d228c56d9be94d
author Victor Stewart <v@nametag.social> Thu Mar 25 18:47:59 2021 -0400
committer GitHub <noreply@github.com> Thu Mar 25 18:47:59 2021 -0400
tree 5c5ef79697e7bce170bc8066bec2d8c71eb7e2a9
parent 7f275af9ce9b4f14be11bfda571a465c6f4c7976

Update openssl.c

lib/openssl.c

diff --git a/lib/openssl.c b/lib/openssl.c
index 6be1232..4dba6d2 100644
--- a/lib/openssl.c
+++ b/lib/openssl.c
@@ -1238,9 +1238,8 @@
     }
 
     X509_VERIFY_PARAM_set_purpose(params, is_server ? X509_PURPOSE_SSL_SERVER : X509_PURPOSE_SSL_CLIENT);
-    X509_VERIFY_PARAM_set_depth(params, 2);
+    X509_VERIFY_PARAM_set_depth(params, 1);
 
-#ifdef X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS
     if (server_name != NULL) {
         if (ptls_server_name_is_ipaddr(server_name)) {
             X509_VERIFY_PARAM_set1_ip_asc(params, server_name);
@@ -1250,9 +1249,6 @@
             X509_VERIFY_PARAM_set_hostflags(params, X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS);
         }          
     }
-    #else
-#warning "hostname validation is disabled; OpenSSL >= 1.0.2 or LibreSSL >= 2.5.0 is required"
-#endif
 
     X509_STORE_CTX_set0_param(verify_ctx, params);