On Sat, 4 Nov 2023, Peter via fpc-devel wrote:
Hi,
Issue 40479 is about a security risk when OpenSSL is used in fcl-web
(TFPHTTPClient). Using the current source/trunk, TLS certificates
having a wrong hostname are accepted, while they should be rejected.
An easy patch for this is available,
Hi,
Issue 40479 is about a security risk when OpenSSL is used in fcl-web
(TFPHTTPClient). Using the current source/trunk, TLS certificates
having a wrong hostname are accepted, while they should be rejected.
An easy patch for this is available, I kindly ask for a review by one
of the developers: