Harden SSL verification against poisoned DNS attacks

... in the case of certificates that are issued against an IP address rather than a hostname.
Patch by Tomas Hoger / Red Hat Security Response Team, reviewed by Jeff Mitchell and Richard Moore.