You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@thrift.apache.org by "Mubashir Kazia (JIRA)" <ji...@apache.org> on 2015/07/11 10:56:04 UTC

[jira] [Updated] (THRIFT-3240) Thrift Python client should support subjectAltName and wildcard certs in TSSLSocket

     [ https://issues.apache.org/jira/browse/THRIFT-3240?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mubashir Kazia updated THRIFT-3240:
-----------------------------------
    Summary: Thrift Python client should support subjectAltName and wildcard certs in TSSLSocket  (was: Thrift Python client should subjectAltName and wildcard certs in TSSLSocket)

> Thrift Python client should support subjectAltName and wildcard certs in TSSLSocket
> -----------------------------------------------------------------------------------
>
>                 Key: THRIFT-3240
>                 URL: https://issues.apache.org/jira/browse/THRIFT-3240
>             Project: Thrift
>          Issue Type: Improvement
>          Components: Python - Library
>    Affects Versions: 0.9.2
>            Reporter: Mubashir Kazia
>              Labels: easyfix, patch, security
>             Fix For: 0.9.3
>
>
> The TSSLSocket in Python Library does not support subjectAltName or wildcard certs. It fails to validate valid certs. Currently it only validates if the CN in Subject of the Server Cert matches the hostname we are trying to connect.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)