Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
Mesos Foundations: RI15 Sp 48, Mesos Foundations: RI 15 Sp 49, Mesos Foundations: RI-16 Sp 50
-
5
Description
Upon connection we first resolve the hostname and forget about it
https://github.com/apache/mesos/blob/master/3rdparty/libprocess/src/http.cpp#L1462-L1504
then later use reverse DNS on the remote address to get back a hostname
and verify the server certificate against that.
Instead, we should verify the server certificate against the hostname that was used by t he client to initiate the connection.