You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@thrift.apache.org by "James Lacey (Jira)" <ji...@apache.org> on 2021/02/02 22:09:00 UTC

[jira] [Created] (THRIFT-5343) TTlsSocketTransport Does Not Work With IPv4 Addresses Or Validate Hostnames Correctly

James Lacey created THRIFT-5343:
-----------------------------------

             Summary: TTlsSocketTransport Does Not Work With IPv4 Addresses Or Validate Hostnames Correctly
                 Key: THRIFT-5343
                 URL: https://issues.apache.org/jira/browse/THRIFT-5343
             Project: Thrift
          Issue Type: Bug
          Components: netstd - Library
    Affects Versions: 0.13.0
            Reporter: James Lacey
            Assignee: James Lacey
             Fix For: 0.14.0


When using the TTlsSocketTransport(string host, ...) constructor, an exception is thrown if the hostname resolves to an IPv4 address. Further, SetupTlsAsync() does not validate the hostname against the certificate correctly during client authentication.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)