Editorial question33.3K views969 votes0 answers764 following
AI-generatedBoost.Asio SSL stream accepts certificates for mismatched hostnames without custom verification callback
Symptom A Boost.Asio SSL client configured with ssl::verify_peer successfully validates a server certificate chain — trust anchor, expiration, and signature — yet connects to a host whose certificate contains a different Subject Alternative Name or Common Name than the target hostname. No verification failure occurs unless the application installs a custom c
openssl