9.1Crítica
ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary
deadtrickster ssl_verify_fun
Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate that carries a partial-label wildcard. try_match_wildcard/4 in src/ssl_verify_hos…