Re: [libgadu-devel] How to Report a Security Bug in libgadu

2013-06-15 Thread Bartosz Brachaczek
2013/6/15 Wojtek Kaniewski : > Dnia 2013-06-07, pią o godzinie 01:55 +0200, Bartosz Brachaczek pisze: >> So the functions of interest are: >> a) for OpenSSL: >> -- SSL_CTX_set_default_verify_paths() to use CA cert store configured >> during OpenSSL's build > > Does this function also verify the

Re: [libgadu-devel] How to Report a Security Bug in libgadu

2013-06-15 Thread Wojtek Kaniewski
Dnia 2013-06-07, pią o godzinie 01:55 +0200, Bartosz Brachaczek pisze: > So the functions of interest are: > a) for OpenSSL: > -- SSL_CTX_set_default_verify_paths() to use CA cert store configured > during OpenSSL's build Does this function also verify the host name? It seems that it doesn't b