#37 Correctly check SSL connection

[Insu Yun]

Hi all
I looked at ssl_auth.c and found that SSL_get_verify_result is checked whether X509_V_OK.
However, according to OpenSSL(https://www.openssl.org/docs/manmaster/ssl/SSL_get_verify_result.html), it is not enough for checking valid SSL connection.
For valid checking, check whether certificate is existing or not.
This is my patch for resolving the issue.

[grumpf_]

hi, thx for the patch.
How did you find that problem ?

[Insu Yun]

Hi. I am currently working on creating some static analyzer.
That analyzer found bug it.

On Wed, Nov 25, 2015 at 5:39 AM, grumpf_ grumpf_@users.sf.net wrote:

hi, thx for the patch.
How did you find that problem ?

---

• [bugs:#37] http://sourceforge.net/p/lprng/bugs/37/ Correctly check SSL
  connection*

Status: open
Group: v1.0 (example)
Created: Fri Nov 20, 2015 07:56 PM UTC by Insu Yun
Last Updated: Fri Nov 20, 2015 07:56 PM UTC
Owner: nobody
Attachments:

• lprng-3.8.C-correctly-check-ssl-connection.patch
  https://sourceforge.net/p/lprng/bugs/37/attachment/lprng-3.8.C-correctly-check-ssl-connection.patch
  (2.0 kB; text/x-patch)

Hi all
I looked at ssl_auth.c and found that SSL_get_verify_result is checked
whether X509_V_OK.
However, according to OpenSSL(
https://www.openssl.org/docs/manmaster/ssl/SSL_get_verify_result.html),
it is not enough for checking valid SSL connection.
For valid checking, check whether certificate is existing or not.
This is my patch for resolving the issue.

---

Sent from sourceforge.net because you indicated interest in
https://sourceforge.net/p/lprng/bugs/37/

To unsubscribe from further messages, please visit
https://sourceforge.net/auth/subscriptions/

--
Regards
Insu Yun