search

hannesm / jackline

minimalistic secure XMPP client in OCaml
BSD 2-Clause "Simplified" License
251 stars 20 forks source link

tls server certificate verification #11

Open hannesm opened 9 years ago

hannesm commented 9 years ago

in short: use nodename, require _xmpp_server (and _xmpp_client) srvname in x509 subjectAltNames https://tools.ietf.org/html/rfc6120#section-13.7.1.2.1 (currently nodename is checked against DNS in subjectAltNames)