[jira] [Commented] (MESOS-9809) Use OpenSSL built-in functions for hostname validation

["Benno Evers (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MESOS-9809?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16867722#comment-16867722 ] 

Benno Evers commented on MESOS-9809:
------------------------------------

Review: https://reviews.apache.org/r/70749/

> Use OpenSSL built-in functions for hostname validation
> ------------------------------------------------------
>
>                 Key: MESOS-9809
>                 URL: https://issues.apache.org/jira/browse/MESOS-9809
>             Project: Mesos
>          Issue Type: Task
>            Reporter: Benno Evers
>            Priority: Major
>              Labels: foundations, libprocess, ssl-tls
>
> We traditionally use a hand-written hostname validation algorithm in libprocess that is based on the example code in https://wiki.openssl.org/index.php/Hostname_validation
> However, since OpenSSL 1.1.0, there is a new built-in function API `SSL_set1_host()` that can be used to let OpenSSL handle hostname validation during the TLS handshake in a standardized manner.
> We should take advantage of this when possible.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)