[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: TLS hostname check relaxed?

To: Michael Ströder <michael@stroeder.com>
Subject: Re: TLS hostname check relaxed?
From: Howard Chu <hyc@symas.com>
Date: Mon, 13 Jul 2009 16:17:25 -0700
Cc: openldap-devel@openldap.org
In-reply-to: <4A5BBD9F.9050809@stroeder.com>
References: <4A5BBD9F.9050809@stroeder.com>
User-agent: Mozilla/5.0 (X11; U; Linux x86_64; rv:1.9.1b5pre) Gecko/20090630 SeaMonkey/2.0a1pre Firefox/3.0.3

Michael Ströder wrote:

HI!

I vaguely remember that there were code changes to the hostname cert
checking when connecting via StartTLS ext.op. or LDAPS. But I'd prefer
if the default behaviour would be strict like it was.


You'll have to be more specific. What are you seeing that it doesn't do any more?

I'm testing with RE24 libs.


--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

Follow-Ups:
- Re: TLS hostname check relaxed?
  - From: Michael Ströder <michael@stroeder.com>

References:
- TLS hostname check relaxed?
  - From: Michael Ströder <michael@stroeder.com>

Prev by Date: TLS hostname check relaxed?
Next by Date: Re: TLS hostname check relaxed?
Index(es):
- Chronological
- Thread