digitalmars.D.bugs - [Issue 9355] New: [security] SSL certificate signature verification disabled in std.net.curl
- d-bugmail puremagic.com (22/22) Jan 19 2013 http://d.puremagic.com/issues/show_bug.cgi?id=9355
- d-bugmail puremagic.com (12/12) Jan 31 2013 http://d.puremagic.com/issues/show_bug.cgi?id=9355
http://d.puremagic.com/issues/show_bug.cgi?id=9355 Summary: [security] SSL certificate signature verification disabled in std.net.curl Product: D Version: D2 Platform: All OS/Version: All Status: NEW Severity: regression Priority: P2 Component: Phobos AssignedTo: nobody puremagic.com ReportedBy: code klickverbot.at PST --- See the discussion in https://github.com/D-Programming-Language/phobos/pull/1076. The commit changes the HTTP-related functions in std.net.curl to no longer verify the signature on the host certificate, rendering any D program using them susceptible to man-in-the-middle attacks. -- Configure issuemail: http://d.puremagic.com/issues/userprefs.cgi?tab=email ------- You are receiving this mail because: -------
Jan 19 2013
http://d.puremagic.com/issues/show_bug.cgi?id=9355 Brad Roberts <braddr puremagic.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |braddr puremagic.com Resolution| |FIXED --- Fixed in https://github.com/D-Programming-Language/phobos/pull/1091 -- Configure issuemail: http://d.puremagic.com/issues/userprefs.cgi?tab=email ------- You are receiving this mail because: -------
Jan 31 2013