tree 35ae5529f3820c0b35afa67258bc7761655d2ca9
parent 3aec96d3dbbc1a167e0be376c4734d5c246e9bf3
author Ryan Schmitt <rschmitt@apache.org> 1578355026 -0800
committer Ryan Schmitt <rschmitt@pobox.com> 1578420542 -0800

DefaultHostnameVerifier: Match DNS and CN names against ICANN domains

This change ensures that during hostname verification the public suffix
list is only used to prevent wildcard matching against entire TLDs (e.g.
`*.com`). Currently, private domains are also being matched against,
which is preventing reasonable wildcards (such as
`*.s3.eu-central-1.amazonaws.com`) from being respected.