You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@mesos.apache.org by "Benno Evers (JIRA)" <ji...@apache.org> on 2019/06/03 22:41:00 UTC

[jira] [Created] (MESOS-9809) Use OpenSSL built-in functions for hostname validation

Benno Evers created MESOS-9809:
----------------------------------

             Summary: Use OpenSSL built-in functions for hostname validation
                 Key: MESOS-9809
                 URL: https://issues.apache.org/jira/browse/MESOS-9809
             Project: Mesos
          Issue Type: Task
            Reporter: Benno Evers


We traditionally use a hand-written hostname validation algorithm in libprocess that is based on the example code in https://wiki.openssl.org/index.php/Hostname_validation

However, since OpenSSL 1.1.0, there is a new built-in function API `SSL_set1_host()` that can be used to let OpenSSL handle hostname validation during the TLS handshake in a standardized manner.

We should take advantage of this when possible.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)