c_cpp/aws-c-io
SHA256
8
0
Fork 0
forked from pool/aws-c-io
Code Pull Requests Activity

Accepting request 901155 from home:glaubitz:branches:devel:libraries:c_c++

Browse Source 
- Update to version 0.10.5
  + Fix SNI check when custom root-CA used on Apple devices.
    * Validate hostname on Mac when custom root-CA is used. (#396)
- from version 0.10.4
  + Revert Windows CRL checks on root CA override
    * On Windows only, reverts the cached CRL check when validating a server
      certificate chain using a root CA override. This check was added as part
      of a larger change performing SNI validation with a root CA override (#385).
      The SNI check remains in place. The CRL check was breaking tls connections
      for multiple customers and appears to be subject to properties of the host
      beyond the CRT's control.
- from version 0.10.3
  + Inconsistent trust store override behavior logged
    * Added warning statement when trust store override is used (#394)

OBS-URL: https://build.opensuse.org/request/show/901155
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/aws-c-io?expand=0&rev=8
This commit is contained in:
Dirk Mueller
2021-06-22 06:35:20 +00:00
committed by Git OBS Bridge
parent 3ed944397d
commit 336a1ee262
4 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
aws-c-io.changes
View File

@@ -1,3 +1,21 @@
-------------------------------------------------------------------
Mon Jun 21 12:07:26 UTC 2021 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 0.10.5
+ Fix SNI check when custom root-CA used on Apple devices.
* Validate hostname on Mac when custom root-CA is used. (#396)
- from version 0.10.4
+ Revert Windows CRL checks on root CA override
* On Windows only, reverts the cached CRL check when validating a server
certificate chain using a root CA override. This check was added as part
of a larger change performing SNI validation with a root CA override (#385).
The SNI check remains in place. The CRL check was breaking tls connections
for multiple customers and appears to be subject to properties of the host
beyond the CRT's control.
- from version 0.10.3
+ Inconsistent trust store override behavior logged
* Added warning statement when trust store override is used (#394)
-------------------------------------------------------------------
Thu Jun 10 11:03:51 UTC 2021 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>