Uploaded image for project: 'Java Couchbase JVM Core'
  1. Java Couchbase JVM Core
  2. JVMCBC-806

hostname validation during TLS/SSL handshake not working

    XMLWordPrintable

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.7.12, 2.0.1
    • None
    • None
    • 1

    Description

      From an initial look, it appears that this is because we don't pass the hostname when creating the SSLEngine object "createSSLEngine()" ... the issue seems to be fixed when using the constructor that takes the hostname "createSSLEngine(hostname, port)"

      This hostname passed is later used in the "match" function for the "String expectedName" in the HostnameChecker.java.

      This link might be useful in covering related topics https://github.com/AsyncHttpClient/async-http-client/issues/513

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          There are no comments yet on this issue.

          People

            daschl Michael Nitschinger
            david.saadeh David Saadeh (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty