validate SSL certificate hostname (#167).

git-svn-id: svn://sylpheed.sraoss.jp/sylpheed/trunk@3321 ee746299-78ed-0310-b773-934348b2243d

1 files changed, 5 insertions, 1 deletions

diff --git a/src/sslmanager.c b/src/sslmanager.c
index e184c699..8dce0526 100644
--- a/src/sslmanager.c
+++ b/src/sslmanager.c
@@ -99,7 +99,11 @@ gint ssl_manager_verify_cert(SockInfo *sockinfo, const gchar *hostname,
 
 	message = g_string_new("");
 	g_string_append_printf(message, _("The SSL certificate of %s cannot be verified by the following reason:"), hostname);
-	g_string_append_printf(message, "\n  %s\n\n", X509_verify_cert_error_string(verify_result));
+	if (verify_result == X509_V_ERR_APPLICATION_VERIFICATION) {
+		g_string_append_printf(message, "\n  certificate hostname does not match\n\n");
+	} else {
+		g_string_append_printf(message, "\n  %s\n\n", X509_verify_cert_error_string(verify_result));
+	}
 	g_string_append_printf(message, _("Subject: %s\n"), subject ? subject : "(unknown)");
 	g_string_append_printf(message, _("Issuer: %s\n"), issuer ? issuer : "(unknown)");
 	g_string_append_printf(message, _("Issued date: %s\n"), not_before);