Disabled SSL certificate verify
Bug #1681177 reported by
Ruan Linqi
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
dnsval (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Hi developers:
We made a large scale security static analysis on several open source projects, and found some mistakes in dnsval-2.0. In the @libval/
int val_dane_
{
[...]
switch (dane_cur->usage) {
[...]
case DANE_USE_
cert = SSL_get_
[...]
}
In this function,you do cert verify . But the API SSL_get_
To post a comment you must log in.