hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rosen Anastasov (Created) (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HTTPCLIENT-1146) HostNameVerifier started resolving hostnames in version 4.1
Date Thu, 17 Nov 2011 15:50:51 GMT
HostNameVerifier started resolving hostnames in version 4.1
-----------------------------------------------------------

                 Key: HTTPCLIENT-1146
                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1146
             Project: HttpComponents HttpClient
          Issue Type: Bug
          Components: HttpClient
            Reporter: Rosen Anastasov


In HttpClient 4.0 the HostNameVerifir verify the host name as specified in the HttpPost(URI).
I.e. 127.0.0.1 or localhost.

HttpClient 4.1 is resolving this as it uses not directly the string host name to pass it to
the verifier, but remoteAddress.getHostName(). 

I.e. the code in 4.0 is hostnameVerifier.verify(host, sslsock);
and in 4.1 is this.hostnameVerifier.verify(remoteAddress.getHostName(), sslsock);

This leads to some differences and regression - clients upgraded with HttpClient 4.1 may stop
function if they have server certificate with IP address and in the same time this IP address
can be resolved to hostname by the OS.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


Mime
View raw message