[QPID-7258] [Python Client for AMQP 0-8...0-9-1] Perform hostname verification of ssl/tls connections

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: qpid-python-1.35.0
• Component/s: Python Client
• Assignee: Unassigned
• Reporter: Lorenz Quack
• Created: 11/May/16 13:56
• Updated: 23/Dec/16 16:30
• Resolved: 13/May/16 08:18

Description

Currently, the Python client for AMQP 0-8...0-9-1 does not perform hostname verification of tls connections. this opens the possibility of Man-in-the-Middle attacks.

We should enhance the client to have this ability, make it configurable and turn the feature on by default.
It should respect hostnames from both CN and SANs, and support wildcards.

Issue Links

• is related to: QPID-7254 [Python Client] Perform SSL hostname verification