Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-1539

Add option to enable certificate host name matching

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Major
    • 2.0.21.Final
    • 2.0.20.Final
    • SSL
    • None

    Description

      When using Undertow as a WebSockets client, Undertow will accept a server-side certificate that DOES NOT match the requested host name. This can be verified by connecting to wrong.host.badssl.com – the issued certificate does not match the indicated host name but Undertow (or rather the underlying SSLEngine) happily moves on.

      It should be possible to indicate that Undertow shall only accept a certificate that matches the indicated host name.

      Attachments

        Issue Links

          relates to

          Bug - A problem that impairs or prevents the functions of the product. UNDERTOW-1564 Proxied SSL Connections use wrong peer address

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              flaviarnn Flavia Rainone
              criege@riege.com Christian Riege (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: