Re: Ruby Net::HTTPS library does not validate server certificate CN

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Ruby Net::HTTPS library does not validate server certificate CN
From: Thomas <tom@xxxxxxxxxxxxxxxxxx>
Date: Mon, 1 Oct 2007 10:10:32 +0200
In-reply-to: <7E3B942D6F9AE64EA28CE80B7283C1EC06A2253997@xxxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <7E3B942D6F9AE64EA28CE80B7283C1EC06A2253997@xxxxxxxxxxxxxxxxxxxxxxx>
Reply-to: tom@xxxxxxxxxxxxxxxxxx
User-agent: KMail/1.9.5

> Ruby Net::HTTPS library does not validate server certificate CN

Python has (had?) the same problem and the various ssl add-ons don't
make the situation better.

Bye,
Thomas

-- 
Tom <tom@xxxxxxxxxxxxxxxxxx>
fingerprint = F055 43E5 1F3C 4F4F 9182  CD59 DBC6 111A 8516 8DBF

References:
- Ruby Net::HTTPS library does not validate server certificate CN
  - From: Chris Clark

Prev by Date: RE: CheckPoint Secure Platform Multiple Buffer Overflows
Next by Date: Re: BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)
Previous by thread: Ruby Net::HTTPS library does not validate server certificate CN
Next by thread: [USN-521-1] libmodplug vulnerability
Index(es):
- Date
- Thread