case-insensitive check of SSL fingerprints (Daniel Richard G.)

Daniel Richard G. writes:
| I was clearing out an old Fetchmail SVN checkout I had lying around
| here, and came across one small change that I forgot to send in.
|
| In socket.c, there's a bit of code that compares SSL certificate
| fingerprints: [...]
|
| That strcmp() call should be an strcasecmp(). At one point, I
| encountered a certificate where the fingerprint's hex digits were in a
| different case than what was expected, and the connection attempt failed
| because of that.  Not exactly what you'd call a potential MitM attack
| :-)

He's right, we can compare case-insensitively without sacrificing
fetchmail's security, so let's just do that for the sake of ease of use.

svn path=/branches/BRANCH_6-3/; revision=5262

0 files changed, 0 insertions, 0 deletions