[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #27984 [Obfuscation/BridgeDB]: bridgedb verifyHostname doesn't check subjectAltName extension

#27984: bridgedb verifyHostname doesn't check subjectAltName extension
----------------------------------+------------------------
 Reporter:  kaie                  |          Owner:  sysrqb
     Type:  defect                |         Status:  new
 Priority:  Medium                |      Milestone:
Component:  Obfuscation/BridgeDB  |        Version:
 Severity:  Normal                |     Resolution:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
 Reviewer:                        |        Sponsor:
----------------------------------+------------------------

Comment (by kaie):

 I've been told about https://pypi.org/project/service_identity/ which is
 another alternative to perform complete hostname verification, and is
 designed to be used together with pyOpenSSL.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27984#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs