zeroc-ice
SChannel host name verification
The Schannel implementation of Ice SSL transport calls IceSSL::SSLEngine::verifyPeerCertName to verify the peer certificate name.
We should switch to using the CertVerifyCertificateChainPolicy method provided by Schannel.
The validation of the peer certificate name, doesn't include the alternate names so it would be a bit limiting to use this for verifying the peer certificate name. It is still useful to call CertVerifyCertificateChainPolicy for validating the certificate usage and other policy constraints.
This was fixed in #2063 to use CertVerifyCertificateChainPolicy, we don't use the built-in name policy because it doesn't check for subject alt-names.