Uploaded image for project: 'C Driver'
  1. C Driver
  2. CDRIVER-1380

Don't verify certificate hostname for Unix Domain Sockets

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.4.0
    • Component/s: None
    • Labels:
      None

      Description

      When connecting over UDS, doing certificate hostname verification makes no sense.

      We should detect this a little earlier and set allow_invalid_hostname=true automatically so individual TLS implementation doesn't have to do silly checks for it like https://github.com/mongodb/mongo-c-driver/blob/master/src/mongoc/mongoc-stream-tls-secure-transport.c#L401

        Attachments

          Activity

            People

            Assignee:
            bjori Hannes Magnusson
            Reporter:
            bjori Hannes Magnusson
            Participants:
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: