Benno Evers created MESOS-9809:
----------------------------------

             Summary: Use OpenSSL built-in functions for hostname validation
                 Key: MESOS-9809
                 URL: https://issues.apache.org/jira/browse/MESOS-9809
             Project: Mesos
          Issue Type: Task
            Reporter: Benno Evers


We traditionally use a hand-written hostname validation algorithm in libprocess 
that is based on the example code in 
https://wiki.openssl.org/index.php/Hostname_validation

However, since OpenSSL 1.1.0, there is a new built-in function API 
`SSL_set1_host()` that can be used to let OpenSSL handle hostname validation 
during the TLS handshake in a standardized manner.

We should take advantage of this when possible.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to