Description
qdstat and qdmanage tools do not ensure that when initiating an SSL connection the host name in the URL to which qdstat and qdmanage connect to matches the host name in the digital certificate that the peer sends back as part of the SSL connection.
Enable host name verification by default on qdstat and qdmanage. Add a command line option called --no-verify-host-name which allows the host name to not match. Add a warning to this command line option saying that it is insecure and should not be used in production environments.