Emmanuel Lécharny created DIRMINA-1202:
------------------------------------------
Summary: TLS peer identity taken from
InetSocketAddress.getHostName() reverse DNS
Key: DIRMINA-1202
URL: https://issues.apache.org/jira/browse/DIRMINA-1202
Project: MINA
Issue Type: Bug
Affects Versions: 2.2.9
Reporter: Emmanuel Lécharny
Fix For: 2.2.10
A MINA client connects to a server with SslFilter and *endpoint identification*
enabled.
An on-path attacker intercepts the *TCP* connection and also answers the
victim's *PTR* query for <server>.in-addr.arpa with a different host name
The victim's _SSLEngine_ verifies the *MITM*'s genuine CA-issued certificate
for attacker.example against the modified hostname — verification passes and
the attacker terminates the 'secure' channel.
The TLS reference identity must be the configured target name, never
network-derived.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
