You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@thrift.apache.org by "Jens Geyer (Jira)" <ji...@apache.org> on 2021/02/04 09:26:01 UTC

[jira] [Resolved] (THRIFT-5343) TTlsSocketTransport does not resolve IPv4 addresses or validate hostnames correctly

     [ https://issues.apache.org/jira/browse/THRIFT-5343?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jens Geyer resolved THRIFT-5343.
--------------------------------
    Fix Version/s: 0.14.0
       Resolution: Fixed

> TTlsSocketTransport does not resolve IPv4 addresses or validate hostnames correctly
> -----------------------------------------------------------------------------------
>
>                 Key: THRIFT-5343
>                 URL: https://issues.apache.org/jira/browse/THRIFT-5343
>             Project: Thrift
>          Issue Type: Bug
>          Components: netstd - Library
>    Affects Versions: 0.13.0
>            Reporter: James Lacey
>            Assignee: James Lacey
>            Priority: Major
>             Fix For: 0.14.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> When using the TTlsSocketTransport(string host, ...) constructor, an exception is thrown if the hostname resolves to an IPv4 address. Further, SetupTlsAsync() does not validate the hostname against the certificate correctly during client authentication.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)