tree 285501c4a1f53c3f6b34e5221eebbf4bf1de2f36
parent 1914465cf180d32b3dfff9c4da15c19363075082
author Daniel Stenberg <daniel@haxx.se> 1640251471 +0100
committer Daniel Stenberg <daniel@haxx.se> 1640730863 +0100
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQFDBAABCgAtFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmHLkPUPHGRhbmllbEBo
 YXh4LnNlAAoJEFzJCP23HhLCqKQIAIb6pqZuK+YsS0cdtqgfC+tBl62wle18yjWX
 rbMUlHD+zAS4fo6hs5YuGsP7MTQApL040PJ30fbsxI86YT6QCpodvmO59TXdV3D+
 XXvOV8Nllk8lq0cX3knNcIhYcGDHSMiNpNR940Og+dR/FosIE52zKa2iU5+MKHWR
 /B/8SilYwvlzsXYC2UpmHwTVXfAEZFi2aGAIGtBDH8Lr5Ucvfw1xhp4KE27SuGTZ
 uiHHJmZv254rg2ZT7YLZmwqyLdDKQGTIpZxjuNbs/pGK5Qegbb6nWRRUIxN9b4vU
 X8HdeZzF+N+4qH8BeuO99GErffQPzqQZs6zkqIJu6m9Edw4u59Y=
 =ispW
 -----END PGP SIGNATURE-----

ngtcp2: verify the server cert on connect (quictls)

Make ngtcp2+quictls correctly acknowledge `CURLOPT_SSL_VERIFYPEER` and
`CURLOPT_SSL_VERIFYHOST`.

The name check now uses a function from lib/vtls/openssl.c which will
need attention for when TLS is not done by OpenSSL or is disabled while
QUIC is enabled.

Possibly the servercert() function in openssl.c should be adjusted to be
able to use for both regular TLS and QUIC.

Ref: #8173
Closes #8178