From 155b3dc71700d2ff31651bbc99b991765a718c4e Mon Sep 17 00:00:00 2001
From: Steven Fackler <sfackler@gmail.com>
Date: Mon, 19 Jun 2023 13:10:09 -0400
Subject: [PATCH] Fix handling of empty host strings

---
 openssl/src/x509/verify.rs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/openssl/src/x509/verify.rs b/openssl/src/x509/verify.rs
index b0e22ef462..e8481c551c 100644
--- a/openssl/src/x509/verify.rs
+++ b/openssl/src/x509/verify.rs
@@ -120,9 +120,11 @@ impl X509VerifyParamRef {
     #[corresponds(X509_VERIFY_PARAM_set1_host)]
     pub fn set_host(&mut self, host: &str) -> Result<(), ErrorStack> {
         unsafe {
+            // len == 0 means "run strlen" :(
+            let raw_host = if host.is_empty() { "\0" } else { host };
             cvt(ffi::X509_VERIFY_PARAM_set1_host(
                 self.as_ptr(),
-                host.as_ptr() as *const _,
+                raw_host.as_ptr() as *const _,
                 host.len(),
             ))
             .map(|_| ())