Uploaded image for project: 'ActiveMQ C++ Client'
  1. ActiveMQ C++ Client
  2. AMQCPP-438

ssl doesnt match the hostname when there are multiple CN's

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Incomplete
    • 3.4.4
    • None
    • Decaf
    • HPUX 11.31, but this is not likely important

    Description

      If the ssl certificate on the server has its hostname in the cn field to be compatable, but it also has other cn's on the same entry, which openssl allows and we always use for all of our certificates, the file OpenSSLSocket.cpp finds that they do not match.
      It is only checking one item, so it is not iterating through different cn's. This sometimes returns the error that the servers certificate did not match the hostname, and sometimes it simply says that peer did not send his wireformat. This has no doesnt have an option to diable it like in NMS, at least not that I ahave found.

      Attachments

        Activity

          People

            tabish Timothy A. Bish
            doldrums Jeffrey B
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - 48h
                48h
                Remaining:
                Remaining Estimate - 48h
                48h
                Logged:
                Time Spent - Not Specified
                Not Specified