[
https://issues.apache.org/jira/browse/DIRMINA-1202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Emmanuel Lécharny closed DIRMINA-1202.
--------------------------------------
> TLS peer identity taken from InetSocketAddress.getHostName() reverse DNS
> ------------------------------------------------------------------------
>
> Key: DIRMINA-1202
> URL: https://issues.apache.org/jira/browse/DIRMINA-1202
> Project: MINA
> Issue Type: Bug
> Affects Versions: 2.2.9
> Reporter: Emmanuel Lécharny
> Priority: Minor
> Fix For: 2.2.10
>
>
> A MINA client connects to a server with SslFilter and *endpoint
> identification* enabled.
> An on-path attacker intercepts the *TCP* connection and also answers the
> victim's *PTR* query for <server>.in-addr.arpa with a different host name
> The victim's _SSLEngine_ verifies the *MITM*'s genuine CA-issued certificate
> for attacker.example against the modified hostname — verification passes and
> the attacker terminates the 'secure' channel.
> The TLS reference identity must be the configured target name, never
> network-derived.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
