Mailing-List: contact proton-help@qpid.apache.org; run by ezmlm
Precedence: bulk
Reply-To: proton@qpid.apache.org
Date: Thu, 17 Oct 2013 18:06:45 +0000 (UTC)
From: "Rafael H. Schloming (JIRA)" <jira@apache.org>
To: proton@qpid.apache.org
Message-ID: <JIRA.12644365.1366814647993.81354.1382033205865@arcas>
In-Reply-To: <JIRA.12644365.1366814647993@arcas>
References: <JIRA.12644365.1366814647993@arcas>
Subject: [jira] [Assigned] (PROTON-302) Messenger does not verify the
 hostname in the peer's SSL certificate.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/PROTON-302?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rafael H. Schloming reassigned PROTON-302:
------------------------------------------

    Assignee: Rafael H. Schloming  (was: Ken Giusti)

> Messenger does not verify the hostname in the peer's SSL certificate.
> ---------------------------------------------------------------------
>
>                 Key: PROTON-302
>                 URL: https://issues.apache.org/jira/browse/PROTON-302
>             Project: Qpid Proton
>          Issue Type: Bug
>          Components: proton-c
>    Affects Versions: 0.5
>            Reporter: Ken Giusti
>            Assignee: Rafael H. Schloming
>            Priority: Blocker
>             Fix For: 0.6
>
>
> When Messenger is configured to use SSL, and a CA database is provided (via set_trusted_certificates), messenger fails to check that the CommonName/Subject Alternate Name provided in the peer's certificate.  Currently, it merely validates that the certificate is signed correctly.


--
This message was sent by Atlassian JIRA
(v6.1#6144)