gotoyuzo	2007-09-24 07:21:18 +0900 (Mon, 24 Sep 2007)

  New Revision: 13499

  Modified files:
    trunk/ChangeLog
    trunk/ext/openssl/lib/openssl/ssl.rb
    trunk/lib/net/http.rb
    trunk/lib/open-uri.rb

  Log:
    * lib/net/http.rb: an SSL verification (the server hostname should
      be matched with its certificate's commonName) is added.
      this verification can be skipped by
      "Net::HTTP#enable_post_connection_check=(false)".
      suggested by Chris Clark <cclark at isecpartners.com>
    
    * lib/net/open-uri.rb: use Net::HTTP#enable_post_connection_check to
      perform SSL post connection check.
    
    * ext/openssl/lib/openssl/ssl.c
      (OpenSSL::SSL::SSLSocket#post_connection_check): refine error message.


  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ChangeLog?r1=13499&r2=13498
  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/lib/open-uri.rb?r1=13499&r2=13498
  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/lib/net/http.rb?r1=13499&r2=13498
  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ext/openssl/lib/openssl/ssl.rb?r1=13499&r2=13498