HostNameVerifier started resolving hostnames in version 4.1
-----------------------------------------------------------

                 Key: HTTPCLIENT-1146
                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1146
             Project: HttpComponents HttpClient
          Issue Type: Bug
          Components: HttpClient
            Reporter: Rosen Anastasov


In HttpClient 4.0 the HostNameVerifir verify the host name as specified in the 
HttpPost(URI). I.e. 127.0.0.1 or localhost.

HttpClient 4.1 is resolving this as it uses not directly the string host name 
to pass it to the verifier, but remoteAddress.getHostName(). 

I.e. the code in 4.0 is hostnameVerifier.verify(host, sslsock);
and in 4.1 is this.hostnameVerifier.verify(remoteAddress.getHostName(), 
sslsock);

This leads to some differences and regression - clients upgraded with 
HttpClient 4.1 may stop function if they have server certificate with IP 
address and in the same time this IP address can be resolved to hostname by the 
OS.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to