Uploaded image for project: 'Thrift'
  1. Thrift
  2. THRIFT-2103

[python] Support for SSL certificates with Subject Alternative Names

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.9
    • Fix Version/s: 0.10.0
    • Component/s: Python - Library
    • Labels:
      None
    • Environment:

      Amazon Linux on EC2.

      Description

      Fails to connect over SSL to hosts that are listed as Subject Alternative Names in the certificate. TSSLSocket.py compairs the the host only to the Common Name.

        Attachments

          Issue Links

          blocks

          Bug - A problem which impairs or prevents the functions of the product. THRIFT-3599 Validate client IP address against cert's SubjectAltName

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. THRIFT-3240 Thrift Python client should support subjectAltName and wildcard certs in TSSLSocket

          • Major - Major loss of function.
          • Closed

            Activity

              People

              • Assignee:
                nsuke Nobuaki Sukegawa
                Reporter:
                jw.clark Joseph Clark
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: