ruby-cvs:20737
From: gotoyuzo ruby-lang.org
Date: Mon, 24 Sep 2007 07:21:42 +0900 (JST)
Subject: [ruby-cvs:20737] Ruby:r13500 (ruby_1_8): * lib/net/http.rb: an SSL verification (the server hostname should
gotoyuzo 2007-09-24 07:21:42 +0900 (Mon, 24 Sep 2007)
New Revision: 13500
Modified files:
branches/ruby_1_8/ChangeLog
branches/ruby_1_8/ext/openssl/lib/openssl/ssl.rb
branches/ruby_1_8/lib/net/http.rb
branches/ruby_1_8/lib/open-uri.rb
Log:
* lib/net/http.rb: an SSL verification (the server hostname should
be matched with its certificate's commonName) is added.
this verification can be skipped by
"Net::HTTP#enable_post_connection_check=(false)".
suggested by Chris Clark <cclark at isecpartners.com>
* lib/net/open-uri.rb: use Net::HTTP#enable_post_connection_check to
perform SSL post connection check.
* ext/openssl/lib/openssl/ssl.c
(OpenSSL::SSL::SSLSocket#post_connection_check): refine error message.
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/ChangeLog?r1=13500&r2=13499
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/lib/open-uri.rb?r1=13500&r2=13499
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/lib/net/http.rb?r1=13500&r2=13499
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8/ext/openssl/lib/openssl/ssl.rb?r1=13500&r2=13499