[tor-bugs] #27984 [Obfuscation/BridgeDB]: bridgedb verifyHostname doesn't check subjectAltName extension
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Oct 10 12:38:45 UTC 2018
#27984: bridgedb verifyHostname doesn't check subjectAltName extension
----------------------------------+------------------------
Reporter: kaie | Owner: sysrqb
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Obfuscation/BridgeDB | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
----------------------------------+------------------------
Comment (by kaie):
I've been told about https://pypi.org/project/service_identity/ which is
another alternative to perform complete hostname verification, and is
designed to be used together with pyOpenSSL.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27984#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list