[ 
https://issues.apache.org/jira/browse/THRIFT-5343?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17277822#comment-17277822
 ] 

Jens Geyer commented on THRIFT-5343:
------------------------------------

If you can provide a patch/PR quickly it could be merged into 0.14.0, What do 
you think?

> TTlsSocketTransport does not resolve IPv4 addresses or validate hostnames 
> correctly
> -----------------------------------------------------------------------------------
>
>                 Key: THRIFT-5343
>                 URL: https://issues.apache.org/jira/browse/THRIFT-5343
>             Project: Thrift
>          Issue Type: Bug
>          Components: netstd - Library
>    Affects Versions: 0.13.0
>            Reporter: James Lacey
>            Assignee: James Lacey
>            Priority: Major
>             Fix For: 0.14.0
>
>
> When using the TTlsSocketTransport(string host, ...) constructor, an 
> exception is thrown if the hostname resolves to an IPv4 address. Further, 
> SetupTlsAsync() does not validate the hostname against the certificate 
> correctly during client authentication.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to