[THRIFT-3240] Thrift Python client should support subjectAltName and wildcard certs in TSSLSocket

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 0.9.2
• Fix Version/s: 0.10.0
• Component/s: Python - Library
• Labels: easyfix patch security
• Patch Info: Patch Available
• Flags: Patch, Important
• Assignee: Jake Farrell
• Reporter: Mubashir Kazia
• Created: 11/Jul/15 08:53
• Updated: 19/Feb/16 02:17
• Resolved: 05/Feb/16 11:59

Description

The TSSLSocket in Python Library does not support subjectAltName or wildcard certs. It fails to validate valid certs. Currently it only validates if the CN in Subject of the Server Cert matches the hostname we are trying to connect.

Issue Links

• duplicates: THRIFT-2103 [python] Support for SSL certificates with Subject Alternative Names