diff options
| author |   bluhm <bluhm@openbsd.org> | 2020-01-07 17:36:04 +0000 |
|---|---|---|
| committer | bluhm <bluhm@openbsd.org> | 2020-01-07 17:36:04 +0000 |
| commit | 1427a40a71bd24644b22c4dca6367e78ced7d6d1 (patch) | |
| tree | db82ec751e1899e31c194c0588f239727ad4972a /usr.sbin/bind/lib/isc/task.c | |
| parent | Add netcat tests with TLS client certificate. (diff) | |
| download | wireguard-openbsd-1427a40a71bd24644b22c4dca6367e78ced7d6d1.tar.xz wireguard-openbsd-1427a40a71bd24644b22c4dca6367e78ced7d6d1.zip | |
If the client provides a TLS certificate and the user specifies a
hash value on the nc(1) server command line, the netcat server must
use the TLS context of the accepted socket for verification. As
the listening socket was used instead, the verification was always
successful.
If the peer provides a certificate, there must be a hash. Make the
hash verification fail safe.
OK tb@
Diffstat (limited to 'usr.sbin/bind/lib/isc/task.c')
0 files changed, 0 insertions, 0 deletions