ruby-cvs:20741
From: shyouhei ruby-lang.org
Date: Mon, 24 Sep 2007 17:12:25 +0900 (JST)
Subject: [ruby-cvs:20741] Ruby:r13504 (ruby_1_8_6): * lib/net/http.rb: an SSL verification (the server hostname should
shyouhei 2007-09-24 17:12:24 +0900 (Mon, 24 Sep 2007)
New Revision: 13504
Modified files:
branches/ruby_1_8_6/ChangeLog
branches/ruby_1_8_6/ext/openssl/lib/openssl/ssl.rb
branches/ruby_1_8_6/lib/net/http.rb
branches/ruby_1_8_6/lib/open-uri.rb
branches/ruby_1_8_6/version.h
Log:
* lib/net/http.rb: an SSL verification (the server hostname should
be matched with its certificate's commonName) is added.
this verification can be skipped by
"Net::HTTP#enable_post_connection_check=(false)".
suggested by Chris Clark <cclark at isecpartners.com>
* lib/net/open-uri.rb: use Net::HTTP#enable_post_connection_check to
perform SSL post connection check.
* ext/openssl/lib/openssl/ssl.c
(OpenSSL::SSL::SSLSocket#post_connection_check): refine error message.
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8_6/ChangeLog?r1=13504&r2=13503
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8_6/version.h?r1=13504&r2=13503
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8_6/lib/open-uri.rb?r1=13504&r2=13503
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8_6/lib/net/http.rb?r1=13504&r2=13503
http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/branches/ruby_1_8_6/ext/openssl/lib/openssl/ssl.rb?r1=13504&r2=13503