diff options
| author | Lee Clagett <code@leeclagett.com> | 2019-03-19 16:04:32 -0400 |
|---|---|---|
| committer | Lee Clagett <code@leeclagett.com> | 2019-04-07 00:44:37 -0400 |
| commit | eca0fea45a1fe2eb359c6fff5f5701e0b2fcdc5a (patch) | |
| tree | dcd4b88bee4974e03ea82f667d7cfa45cee55df7 /src/cryptonote_basic | |
| parent | 0416764caec5b2d504c820e71d74a4934c3e2c3e (diff) | |
| download | monzero-core-eca0fea45a1fe2eb359c6fff5f5701e0b2fcdc5a.tar.gz monzero-core-eca0fea45a1fe2eb359c6fff5f5701e0b2fcdc5a.tar.xz monzero-core-eca0fea45a1fe2eb359c6fff5f5701e0b2fcdc5a.zip | |
Perform RFC 2818 hostname verification in client SSL handshakes
If the verification mode is `system_ca`, clients will now do hostname
verification. Thus, only certificates from expected hostnames are
allowed when SSL is enabled. This can be overridden by forcible setting
the SSL mode to autodetect.
Clients will also send the hostname even when `system_ca` is not being
performed. This leaks possible metadata, but allows servers providing
multiple hostnames to respond with the correct certificate. One example
is cloudflare, which getmonero.org is currently using.
Diffstat (limited to 'src/cryptonote_basic')
0 files changed, 0 insertions, 0 deletions