Disallow wildcard partial domains when using MatchDomainName.

[kareem-wolfssl]

Description

Fixes zd#21354

Testing

Built in tests + provided reproducer.

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Pull request overview

Updates MatchDomainName to reject “partial domain” wildcard patterns in strict left-wildcard matching, aligning behavior with the intended *.domain.com-only rule (fixes zd#21354).

Changes:

• Disallows patterns like *domain.com when leftWildcardOnly is enabled.
• Enforces that the character following the wildcard must be . (i.e., *.domain.com).

Comments suppressed due to low confidence (1)

src/internal.c:1

• This check assumes pattern points to the character immediately after the *. If pattern still points at the * (or at some other position due to surrounding parsing), this would incorrectly reject all strict-left-wildcard patterns. Consider making the check explicitly reference the character after the wildcard (e.g., using an index/offset relative to the wildcard position) or adjust the code so it unambiguously advances past * before this check.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[JacobBarthelmeh]

Retest this please Jenkins. Error during multi-test pid 44258 for port 24539 exited before creating ready file. bailing...