Bug#507402: LWP::Protocol::https/_check_sock() has insufficient certificate checking

2009-02-28 Thread Antonio Radici
tag 507402 +upstream forwarded 507402 https://rt.cpan.org/Ticket/Display.html?id=43733 thanks Hi, thanks for your report. I've forwarded the problem upstream. Cheers Antonio -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contac

Bug#507402: LWP::Protocol::https/_check_sock() has insufficient certificate checking

2008-11-30 Thread Daniel T Chen
Package: libwww-perl Version: 5.820-1 Forwarded from Ubuntu #198874 (https://bugs.launchpad.net/ubuntu/+source/libwww-perl/+bug/198874): The reporter states: "See LWP::Protocol::https class, the _check_sock function: we don't execute $sock->get_peer_verify before checking the cert's subject