[
https://issues.apache.org/jira/browse/MESOS-9809?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16867722#comment-16867722
]
Benno Evers commented on MESOS-9809:
------------------------------------
Review: https://reviews.apache.org/r/70749/
> Use OpenSSL built-in functions for hostname validation
> ------------------------------------------------------
>
> Key: MESOS-9809
> URL: https://issues.apache.org/jira/browse/MESOS-9809
> Project: Mesos
> Issue Type: Task
> Reporter: Benno Evers
> Priority: Major
> Labels: foundations, libprocess, ssl-tls
>
> We traditionally use a hand-written hostname validation algorithm in
> libprocess that is based on the example code in
> https://wiki.openssl.org/index.php/Hostname_validation
> However, since OpenSSL 1.1.0, there is a new built-in function API
> `SSL_set1_host()` that can be used to let OpenSSL handle hostname validation
> during the TLS handshake in a standardized manner.
> We should take advantage of this when possible.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
