NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

bin/53846: ftp doesn't verify certificates for https:// requests



>Number:         53846
>Category:       bin
>Synopsis:       ftp doesn't verify certificates for https:// requests
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Jan 08 22:35:00 +0000 2019
>Originator:     rlntlss
>Release:        8.0
>Organization:
independent
>Environment:
8.0 amd64
>Description:
>From a brief look at ftp it seems that there is no option to verify the SSL certificates on https:// requests.
>How-To-Repeat:
i believe it was ssl.c that was missing the _verify()
>Fix:
add the call to the verify option, but also add some error checking to detail a failure



Home | Main Index | Thread Index | Old Index