[Pidgin] #3009: Check signature chains before checking hostname

Pidgin trac at pidgin.im
Sun Sep 9 02:10:19 EDT 2007


#3009: Check signature chains before checking hostname
-----------------------+----------------------------------------------------
 Reporter:  wehlhard   |       Owner:  wehlhard
     Type:  defect     |      Status:  new     
 Priority:  minor      |   Milestone:  2.2.1   
Component:  libpurple  |     Version:  2.1.1   
 Keywords:             |     Pending:  0       
-----------------------+----------------------------------------------------
 The tls_cached code should check the certificate signatures BEFORE
 checking the hostname, not after.

 Also, maybe it should prompt the user again if the hostname check fails?

-- 
Ticket URL: <http://developer.pidgin.im/ticket/3009>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list