<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 21:11:44 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[CDRIVER-1154] Missing Certificate Verification on reconnect</title>
                <link>https://jira.mongodb.org/browse/CDRIVER-1154</link>
                <project id="10030" key="CDRIVER">C Driver</project>
                    <description>&lt;p&gt;When an operation times out, or an operation otherwise fails for whatever reason, we don&apos;t recheck the certificate when reconnecting to the node.&lt;/p&gt;</description>
                <environment></environment>
        <key id="271671">CDRIVER-1154</key>
            <summary>Missing Certificate Verification on reconnect</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="9">Done</resolution>
                                        <assignee username="jesse@mongodb.com">A. Jesse Jiryu Davis</assignee>
                                    <reporter username="bjori">Hannes Magnusson</reporter>
                        <labels>
                    </labels>
                <created>Fri, 11 Mar 2016 00:50:06 +0000</created>
                <updated>Wed, 10 Aug 2016 22:10:57 +0000</updated>
                            <resolved>Tue, 15 Mar 2016 02:25:27 +0000</resolved>
                                    <version>1.2.0</version>
                    <version>1.3.0</version>
                                    <fixVersion>1.4.0</fixVersion>
                    <fixVersion>1.3.4</fixVersion>
                    <fixVersion>1.2.4</fixVersion>
                                                        <votes>0</votes>
                                    <watches>2</watches>
                                                                                                                <comments>
                            <comment id="1204510" author="xgen-internal-githook" created="Tue, 15 Mar 2016 21:22:51 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;ajdavis&apos;, u&apos;name&apos;: u&apos;A. Jesse Jiryu Davis&apos;, u&apos;email&apos;: u&apos;jesse@mongodb.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-1154&quot; title=&quot;Missing Certificate Verification on reconnect&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-1154&quot;&gt;&lt;del&gt;CDRIVER-1154&lt;/del&gt;&lt;/a&gt;: Add test&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-c-driver/commit/62247e71564b4f06c4bc0fc4932a98dfe8317a49&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-c-driver/commit/62247e71564b4f06c4bc0fc4932a98dfe8317a49&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1204509" author="xgen-internal-githook" created="Tue, 15 Mar 2016 21:22:50 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;bjori&apos;, u&apos;name&apos;: u&apos;Hannes Magnusson&apos;, u&apos;email&apos;: u&apos;bjori@php.net&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-1154&quot; title=&quot;Missing Certificate Verification on reconnect&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-1154&quot;&gt;&lt;del&gt;CDRIVER-1154&lt;/del&gt;&lt;/a&gt;: Missing certificate &amp;amp; hostname verification on reconnect&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-c-driver/commit/b7ae105d37c36d575bf1cd7d88de041c6f6e9ce0&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-c-driver/commit/b7ae105d37c36d575bf1cd7d88de041c6f6e9ce0&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1204508" author="xgen-internal-githook" created="Tue, 15 Mar 2016 21:22:50 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;bjori&apos;, u&apos;name&apos;: u&apos;Hannes Magnusson&apos;, u&apos;email&apos;: u&apos;bjori@php.net&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-1154&quot; title=&quot;Missing Certificate Verification on reconnect&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-1154&quot;&gt;&lt;del&gt;CDRIVER-1154&lt;/del&gt;&lt;/a&gt;: Let OpenSSL verify the peer during handshake&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-c-driver/commit/a3a6f5418af66045095c84569b17598d4b093911&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-c-driver/commit/a3a6f5418af66045095c84569b17598d4b093911&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1203329" author="xgen-internal-githook" created="Tue, 15 Mar 2016 02:39:18 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;ajdavis&apos;, u&apos;name&apos;: u&apos;A. Jesse Jiryu Davis&apos;, u&apos;email&apos;: u&apos;jesse@mongodb.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-1154&quot; title=&quot;Missing Certificate Verification on reconnect&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-1154&quot;&gt;&lt;del&gt;CDRIVER-1154&lt;/del&gt;&lt;/a&gt; verify cert on reconnect&lt;/p&gt;

&lt;p&gt;Single-threaded clients had not re-checked the server certificate after&lt;br/&gt;
a disconnect.&lt;/p&gt;

&lt;p&gt;Conflicts:&lt;br/&gt;
	src/mongoc/mongoc-cluster.c&lt;br/&gt;
	tests/test-mongoc-client.c&lt;br/&gt;
Branch: r1.2&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-c-driver/commit/82ed2a0a74a2a007740735fa889c4c900348dfde&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-c-driver/commit/82ed2a0a74a2a007740735fa889c4c900348dfde&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1203300" author="jesse" created="Tue, 15 Mar 2016 01:49:16 +0000"  >&lt;p&gt;Security vulnerability: when a mongoc_client_t uses SSL and is disconnected, it failed to re-verify the server certificate after reconnecting. This flaw affects single clients, not pooled ones.&lt;/p&gt;</comment>
                            <comment id="1203290" author="xgen-internal-githook" created="Tue, 15 Mar 2016 01:29:29 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;ajdavis&apos;, u&apos;name&apos;: u&apos;A. Jesse Jiryu Davis&apos;, u&apos;email&apos;: u&apos;jesse@mongodb.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-1154&quot; title=&quot;Missing Certificate Verification on reconnect&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-1154&quot;&gt;&lt;del&gt;CDRIVER-1154&lt;/del&gt;&lt;/a&gt; verify cert on reconnect&lt;/p&gt;

&lt;p&gt;Single-threaded clients had not re-checked the server certificate after&lt;br/&gt;
a disconnect.&lt;br/&gt;
Branch: r1.3&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-c-driver/commit/43fa58228af2b262ffe0534a9ec2efbf566f6ed4&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-c-driver/commit/43fa58228af2b262ffe0534a9ec2efbf566f6ed4&lt;/a&gt;&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                                                <inwardlinks description="is depended on by">
                                                        </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="272441">CDRIVER-1157</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10857" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>CDRIVER-1156</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hrdemn:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10557" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="918">C Driver 2016 sprint 3</customfieldvalue>
    <customfieldvalue id="959">C Driver 2016 sprint 4</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>