diff options
| author | Jose <jose@zeroc.com> | 2017-02-22 19:06:16 +0100 |
|---|---|---|
| committer | Jose <jose@zeroc.com> | 2017-02-22 19:06:16 +0100 |
| commit | 88eceb7c051cdb53eb4009774d1fb6bebb95d4d5 (patch) | |
| tree | da7e01e0533558bced252578ee88fb8d259eb1c8 /csharp/src | |
| parent | Fix hostname verification to ignore errors when IceSSL.VerifyPeer is 0 (diff) | |
| download | ice-88eceb7c051cdb53eb4009774d1fb6bebb95d4d5.tar.bz2 ice-88eceb7c051cdb53eb4009774d1fb6bebb95d4d5.tar.xz ice-88eceb7c051cdb53eb4009774d1fb6bebb95d4d5.zip | |
Disable SSL host name verification with empty host
Diffstat (limited to 'csharp/src')
| -rw-r--r-- | csharp/src/IceSSL/TransceiverI.cs | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/csharp/src/IceSSL/TransceiverI.cs b/csharp/src/IceSSL/TransceiverI.cs index f46396bd9a2..ea026ef098a 100644 --- a/csharp/src/IceSSL/TransceiverI.cs +++ b/csharp/src/IceSSL/TransceiverI.cs @@ -605,9 +605,13 @@ namespace IceSSL if((errors & (int)SslPolicyErrors.RemoteCertificateNameMismatch) > 0) { - if(_instance.engine().getCheckCertName()) + if(_instance.engine().getCheckCertName() && !string.IsNullOrEmpty(_host)) { - message = "SSL certificate validation failed - Hostname mismatch"; + if(_instance.securityTraceLevel() >= 1) + { + _instance.logger().trace(_instance.securityTraceCategory(), + "SSL certificate validation failed - Hostname mismatch"); + } return false; } else |