Re: [Amsn-devel] Fwd: Regarding aMSN SSL Certificate Validation Security Bypass issue

2010-03-10 Thread Boris 'billiob' Faure
I've added certificates in utils and added checks around ::tls::socket use in commit 11991. Please test. Greetings -- Boris 'billiob' Faure -- Download Intel® Parallel Studio Eval Try the new software tools for yourself.

Re: [Amsn-devel] Fwd: Regarding aMSN SSL Certificate Validation Security Bypass issue

2010-03-09 Thread Sander Hoentjen
On Mon, 2010-03-08 at 19:18 +0100, Álvaro J. Iradier wrote: > On Mon, Mar 8, 2010 at 7:03 PM, Youness Alaoui > wrote: > > Hi, > > I remember looking at the 'how to validate certificates with tcl-tls' a > > while ago, it's not really hard, but it will probably be annoying to do it.. > > especially

Re: [Amsn-devel] Fwd: Regarding aMSN SSL Certificate Validation Security Bypass issue

2010-03-08 Thread Álvaro J . Iradier
On Mon, Mar 8, 2010 at 7:03 PM, Youness Alaoui wrote: > Hi, > I remember looking at the 'how to validate certificates with tcl-tls' a > while ago, it's not really hard, but it will probably be annoying to do it.. > especially considering the http stuff, and in cases of proxies (the code and > API

Re: [Amsn-devel] Fwd: Regarding aMSN SSL Certificate Validation Security Bypass issue

2010-03-08 Thread Youness Alaoui
Hi, I remember looking at the 'how to validate certificates with tcl-tls' a while ago, it's not really hard, but it will probably be annoying to do it.. especially considering the http stuff, and in cases of proxies (the code and API used for proxies is different).. there are so many tls connectio

[Amsn-devel] Fwd: Regarding aMSN SSL Certificate Validation Security Bypass issue

2010-03-08 Thread Álvaro J . Iradier
I didn't know about this problem with the certificate. Sounds easy to fix, maybe just check certificate signature, and give a warning if mismatch? what do you think? -- Forwarded message -- From: Jan Lieskovsky Date: Mon, Mar 8, 2010 at 6:31 PM Subject: Regarding aMSN SSL Certif