[Bug 959] New: SSL misconfiguration

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Thu Jun 12 15:07:19 CEST 2014


https://bugzilla.netfilter.org/show_bug.cgi?id=959

           Summary: SSL misconfiguration
           Product: bugzilla
           Version: other
          Platform: x86_64
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: netfilter bugzilla
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: jean-paul at hybridcluster.net
   Estimated Hours: 0.0


Upon account registration, a link is generated to
https://bugzilla.netfilter.org/.

Upon following the link, a working browser presents a warning something like:

You attempted to reach bugzilla.netfilter.org, but instead you actually reached
a server identifying itself as vishnu.netfilter.org.

A simple test using the openssl debug client:

    openssl s_client -servername bugzilla.netfilter.org -connect
bugzilla.netfilter.org:443

Confirms that the certificate served is for vishnu.netfilter.org instead of for
bugzilla.netfilter.org.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list