hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Oleg Kalnichevski (Resolved) (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (HTTPCLIENT-1146) HostNameVerifier started resolving hostnames in version 4.1
Date Thu, 17 Nov 2011 21:18:52 GMT

     [ https://issues.apache.org/jira/browse/HTTPCLIENT-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Oleg Kalnichevski resolved HTTPCLIENT-1146.
-------------------------------------------

    Resolution: Duplicate

Duplicate of HTTPCLIENT-1051. Fixed in 4.1.2

Oleg
                
> HostNameVerifier started resolving hostnames in version 4.1
> -----------------------------------------------------------
>
>                 Key: HTTPCLIENT-1146
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1146
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>          Components: HttpClient
>            Reporter: Rosen Anastasov
>
> In HttpClient 4.0 the HostNameVerifir verify the host name as specified in the HttpPost(URI).
I.e. 127.0.0.1 or localhost.
> HttpClient 4.1 is resolving this as it uses not directly the string host name to pass
it to the verifier, but remoteAddress.getHostName(). 
> I.e. the code in 4.0 is hostnameVerifier.verify(host, sslsock);
> and in 4.1 is this.hostnameVerifier.verify(remoteAddress.getHostName(), sslsock);
> This leads to some differences and regression - clients upgraded with HttpClient 4.1
may stop function if they have server certificate with IP address and in the same time this
IP address can be resolved to hostname by the OS.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


Mime
View raw message