You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@thrift.apache.org by "Jens Geyer (Jira)" <ji...@apache.org> on 2021/02/03 08:51:00 UTC

[jira] [Commented] (THRIFT-5343) TTlsSocketTransport does not resolve IPv4 addresses or validate hostnames correctly

    [ https://issues.apache.org/jira/browse/THRIFT-5343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17277822#comment-17277822 ] 

Jens Geyer commented on THRIFT-5343:
------------------------------------

If you can provide a patch/PR quickly it could be merged into 0.14.0, What do you think?

> TTlsSocketTransport does not resolve IPv4 addresses or validate hostnames correctly
> -----------------------------------------------------------------------------------
>
>                 Key: THRIFT-5343
>                 URL: https://issues.apache.org/jira/browse/THRIFT-5343
>             Project: Thrift
>          Issue Type: Bug
>          Components: netstd - Library
>    Affects Versions: 0.13.0
>            Reporter: James Lacey
>            Assignee: James Lacey
>            Priority: Major
>             Fix For: 0.14.0
>
>
> When using the TTlsSocketTransport(string host, ...) constructor, an exception is thrown if the hostname resolves to an IPv4 address. Further, SetupTlsAsync() does not validate the hostname against the certificate correctly during client authentication.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)