[GitHub] ivankelly opened a new issue #2793: TLS Hostname verification undefined for C++/python client

[GitBox <gi...@apache.org>]

ivankelly opened a new issue #2793: TLS Hostname verification undefined for C++/python client
URL: https://github.com/apache/pulsar/issues/2793
 
 
   I've not tested with code, but it looks like TLS hostname verification is a mess for the C++ client (and python by extension).
   
   For binary connections, no hostname verification takes place as far as I can see. For http connections (for lookups) it takes place every time.
   
   I suspect this made it through testing since the tls certs used to test C++ use localhost as the common name. We should expose the ability to add the host verification in the configuration.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services