[PROTON-302] Messenger does not verify the hostname in the peer's SSL certificate.

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: proton-0.5
• Fix Version/s: proton-0.6
• Component/s: proton-c
• Assignee: Ken Giusti
• Reporter: Ken Giusti
• Created: 24/Apr/13 14:44
• Updated: 07/Jan/16 11:34
• Resolved: 05/Nov/13 14:47

Description

When Messenger is configured to use SSL, and a CA database is provided (via set_trusted_certificates), messenger fails to check that the CommonName/Subject Alternate Name provided in the peer's certificate. Currently, it merely validates that the certificate is signed correctly.