# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1380207339 -7200
# Node ID c48f717c2fd6166776021ea79452c3ffa3ae0029
# Parent  4f545674b0bcd1e806a21bb87953a98e8a3833bc
util.x509: Only compare identity with oid-on-xmppAddr for XMPP services

diff -r 4f545674b0bc -r c48f717c2fd6 util/x509.lua
--- a/util/x509.lua	Sun Sep 22 04:29:27 2013 +0200
+++ b/util/x509.lua	Thu Sep 26 16:55:39 2013 +0200
@@ -161,7 +161,9 @@
 
 		if sans[oid_xmppaddr] then
 			had_supported_altnames = true
-			if compare_xmppaddr(host, sans[oid_xmppaddr]) then return true end
+			if service == "_xmpp-client" or service == "_xmpp-server" then
+				if compare_xmppaddr(host, sans[oid_xmppaddr]) then return true end
+			end
 		end
 
 		if sans[oid_dnssrv] then