diff -r 34716fd837a4 -r be944660c56a wp/wp-includes/Requests/SSL.php --- a/wp/wp-includes/Requests/SSL.php Tue Dec 15 15:52:01 2020 +0100 +++ b/wp/wp-includes/Requests/SSL.php Wed Sep 21 18:19:35 2022 +0200 @@ -20,7 +20,6 @@ * * Unfortunately, PHP doesn't check the certificate against the alternative * names, leading things like 'https://www.github.com/' to be invalid. - * Instead * * @see https://tools.ietf.org/html/rfc2818#section-3.1 RFC2818, Section 3.1 * @@ -30,13 +29,6 @@ * @return bool */ public static function verify_certificate($host, $cert) { - // Calculate the valid wildcard match if the host is not an IP address - $parts = explode('.', $host); - if (ip2long($host) === false) { - $parts[0] = '*'; - } - $wildcard = implode('.', $parts); - $has_dns_alt = false; // Check the subjectAltName @@ -139,7 +131,7 @@ // Also validates that the host has 3 parts or more, as per Firefox's // ruleset. if (ip2long($host) === false) { - $parts = explode('.', $host); + $parts = explode('.', $host); $parts[0] = '*'; $wildcard = implode('.', $parts); if ($wildcard === $reference) {