[THRIFT-5343] TTlsSocketTransport does not resolve IPv4 addresses or validate hostnames correctly

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.13.0
• Fix Version/s: 0.14.0
• Component/s: netstd - Library
• Assignee: James Lacey
• Reporter: James Lacey
• Created: 02/Feb/21 22:08
• Updated: 11/Feb/21 22:26
• Resolved: 04/Feb/21 09:25

Description

When using the TTlsSocketTransport(string host, ...) constructor, an exception is thrown if the hostname resolves to an IPv4 address. Further, SetupTlsAsync() does not validate the hostname against the certificate correctly during client authentication.

Issue Links

• links to: GitHub Pull Request #2322