[
https://issues.apache.org/jira/browse/PROTON-2974?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrew Stitcher resolved PROTON-2974.
-------------------------------------
Resolution: Fixed
> TLS peer hostname verification should proceed according to RFC9525
> ------------------------------------------------------------------
>
> Key: PROTON-2974
> URL: https://issues.apache.org/jira/browse/PROTON-2974
> Project: Qpid Proton
> Issue Type: Bug
> Components: proton-c
> Reporter: Andrew Stitcher
> Assignee: Andrew Stitcher
> Priority: Major
> Fix For: proton-c-0.41.0
>
>
> Our current TLS peer hostname verification is home grown and not in
> accordance with modern standards. The modern standards are actually much
> stricter and simpler than what we implemented.
> Since this code was written OpenSSL has got the ability to do this and we can
> just require a base version of OpenSSL which can do it.
> The SChannel Win32 code can implement the stricter checks too in custom code
> which is much simplified from the original.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
