CVS commit: pkgsrc/net/libfetch

["Taylor R Campbell" <riastradh%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   riastradh
Date:           Tue Oct 20 17:43:31 UTC 2026

Modified Files:
        pkgsrc/net/libfetch: Makefile
        pkgsrc/net/libfetch/files: common.c

Log Message:
libfetch: Fix missing SSL_set1_host call.

PR lib/60878: libfetch: missing peer hostname check


To generate a diff of this commit:
cvs rdiff -u -r1.70 -r1.71 pkgsrc/net/libfetch/Makefile
cvs rdiff -u -r1.38 -r1.39 pkgsrc/net/libfetch/files/common.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/libfetch/Makefile
diff -u pkgsrc/net/libfetch/Makefile:1.70 pkgsrc/net/libfetch/Makefile:1.71
--- pkgsrc/net/libfetch/Makefile:1.70   Thu Apr 16 10:16:29 2026
+++ pkgsrc/net/libfetch/Makefile        Tue Oct 20 17:43:30 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.70 2026/04/16 10:16:29 wiz Exp $
+# $NetBSD: Makefile,v 1.71 2026/10/20 17:43:30 riastradh Exp $
 
 DISTNAME=      libfetch-2.40
-PKGREVISION=   5
+PKGREVISION=   6
 CATEGORIES=    net
 MASTER_SITES=  # empty
 DISTFILES=     # empty

Index: pkgsrc/net/libfetch/files/common.c
diff -u pkgsrc/net/libfetch/files/common.c:1.38 pkgsrc/net/libfetch/files/common.c:1.39
--- pkgsrc/net/libfetch/files/common.c:1.38     Thu Apr 16 10:34:47 2026
+++ pkgsrc/net/libfetch/files/common.c  Tue Oct 20 17:43:31 2026
@@ -1,4 +1,4 @@
-/*     $NetBSD: common.c,v 1.38 2026/04/16 10:34:47 wiz Exp $  */
+/*     $NetBSD: common.c,v 1.39 2026/10/20 17:43:31 riastradh Exp $    */
 /*-
  * Copyright (c) 1998-2004 Dag-Erling Coïdan Smørgrav
  * Copyright (c) 2008, 2010 Joerg Sonnenberger <joerg%NetBSD.org@localhost>
@@ -473,6 +473,7 @@ fetch_ssl(conn_t *conn, const struct url
        }
        conn->buf_events = 0;
        SSL_set_fd(conn->ssl, conn->sd);
+       SSL_set1_host(conn->ssl, URL->host);
 #if OPENSSL_VERSION_NUMBER >= 0x0090806fL && !defined(OPENSSL_NO_TLSEXT)
        if (!SSL_set_tlsext_host_name(conn->ssl, (char *)(uintptr_t)URL->host)) {
                fprintf(stderr,