| Crates.io | openssl-verify |
| lib.rs | openssl-verify |
| version | 0.2.0 |
| created_at | 2016-05-06 04:46:25.489106+00 |
| updated_at | 2016-08-12 06:22:05.767659+00 |
| description | Hostname verification for OpenSSL |
| homepage | |
| repository | https://github.com/sfackler/rust-openssl-verify |
| max_upload_size | |
| id | 4983 |
| size | 59,615 |
Hostname verification for OpenSSL.
OpenSSL up until version 1.1.0 did not support verification that the certificate a server presents matches the domain a client is connecting to. This check is crucial, as an attacker otherwise needs only to obtain a legitimately signed certificate to some domain to execute a man-in-the-middle attack.
The implementation in this crate is based off of libcurl's.