tls: normalize hostname for server identity checks
Signed-off-by: Matteo Collina <hello@matteocollina.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/869
Backport-PR-URL: https://github.com/nodejs-private/node-private/pull/893
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
CVE-ID: CVE-2026-48618
Refs: https://hackerone.com/reports/
3688064
origin: backport, https://github.com/nodejs/node/commit/
2197a47144f3356ab451c5dcd858a49eb5957a70
Gbp-Pq: Topic sec
Gbp-Pq: Name CVE-2026-48618.patch