[Pidgin] #3009: Check signature chains before checking hostname
Pidgin
trac at pidgin.im
Sun Sep 9 02:10:19 EDT 2007
#3009: Check signature chains before checking hostname
-----------------------+----------------------------------------------------
Reporter: wehlhard | Owner: wehlhard
Type: defect | Status: new
Priority: minor | Milestone: 2.2.1
Component: libpurple | Version: 2.1.1
Keywords: | Pending: 0
-----------------------+----------------------------------------------------
The tls_cached code should check the certificate signatures BEFORE
checking the hostname, not after.
Also, maybe it should prompt the user again if the hostname check fails?
--
Ticket URL: <http://developer.pidgin.im/ticket/3009>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list