From 23312675cb2d71646f5b8396995473d224650f9d Mon Sep 17 00:00:00 2001
From: Hannes Magnusson <hannes.magnusson@creditkarma.com>
Date: Thu, 14 Dec 2017 15:45:44 -0800
Subject: [PATCH] crypto: provide full cert details to checkServerIdentity

PR-URL: https://github.com/nodejs/node/pull/17690
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
---
 lib/_tls_wrap.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/_tls_wrap.js b/lib/_tls_wrap.js
index 8d988cbdbc3b90..1a4dad0bf7dd6f 100644
--- a/lib/_tls_wrap.js
+++ b/lib/_tls_wrap.js
@@ -1052,7 +1052,7 @@ function onConnectSecure() {
                    options.host ||
                    (options.socket && options.socket._host) ||
                    'localhost';
-    const cert = this.getPeerCertificate();
+    const cert = this.getPeerCertificate(true);
     verifyError = options.checkServerIdentity(hostname, cert);
   }